Input validation vulnerability in Metrika 1.2

The Metrika plugin for WordPress has a security issue called Cross-Site Request Forgery. This can affect all versions up to 1.2. The problem is that the plugin does not properly check for a special code meant to prevent unauthorized changes. This means that someone who is not logged in can change the plugin’s settings and add harmful code to the website. They can do this by tricking the site’s owner into clicking on a link.