Input validation vulnerability in School Management System – WPSchoolPress 2.2.5

The WPSchoolPress plugin for WordPress is vulnerable to a security problem called Cross-Site Request Forgery in versions up to 2.2.4. This means that attackers who are not authorized to use the website can make requests that look like they come from a legitimate user. This happens because the plugin does not properly validate the requests made by users, which makes it possible for a malicious user to trick a website administrator into clicking a link and performing an action.