Input validation vulnerability in MZ MBO Access 2.0.8

The MZ MBO Access plugin for WordPress is vulnerable to a security attack known as Cross-Site Request Forgery. Versions of the plugin up to 2.0.8, including that version, are affected. This is because the plugin does not validate some user actions correctly, which makes it possible for unauthenticated attackers to manipulate the website if an administrator clicks on a malicious link.