Input validation vulnerability in Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress 21.2.8.4

The Photos and Files Contest Gallery plugin for WordPress is vulnerable to a security issue called Cross-Site Request Forgery. This means that anyone without proper permission can perform unauthorized actions on the plugin, including uploading files and sharing them on social media. This is because there is a problem with how the plugin checks for a special code called a nonce. Attackers can take advantage of this issue by tricking a site administrator into clicking on a link and granting them access to perform these actions.