Input validation vulnerability in Realbig For WordPress 1.0.2

The Realbig plugin for WordPress is vulnerable to an attack called Cross-Site Request Forgery in versions up to 1.0.2. This means that an unauthenticated attacker can modify the plugin settings, clear logs and cache if they can manage to get an administrator to perform an action such as clicking on a link. This is possible because the plugin does not validate the nonce for the tokenSync() function.