Input validation vulnerability in Songkick Concerts and Festivals 0.9.7

A popular add-on for WordPress called “Songkick Concerts and Festivals” has a security issue that can allow hackers to change settings and add harmful code to a website. This vulnerability affects all versions of the plugin up to version 0.9.7. It happens because the plugin does not properly check for a special code that verifies the user’s identity. This means that someone who is not logged into the website could trick the site administrator into clicking a link that gives them access to make changes.