Input validation vulnerability in SRS Simple Hits Counter 1.1.0

The SRS Simple Hits Counter plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This type of attack allows malicious users to modify the plugin’s settings without needing to be authenticated. This is possible because the plugin doesn’t have the right protection in place, which is called a nonce validation. If a malicious user is able to trick an administrator into clicking a link, they can take control of the plugin’s settings. The vulnerability affects all versions up to and including 1.1.0.