Input validation vulnerability in CallPhone'r 1.1.1

The CallPhone’r plugin for WordPress has a security issue called Cross-Site Request Forgery. This problem affects all versions up to 1.1.1. The plugin does not properly check for a security code, making it possible for unauthorized people to change settings and add harmful code to a website. This can happen if they can deceive the site’s administrator into doing something, like clicking on a fake link.