Access violation vulnerability in SimpleShop 2.10.0

The SimpleShop plugin for WordPress has a security flaw that allows attackers to trick site administrators into disconnecting the plugin from the website. This vulnerability affects all versions up to 2.10.0. It is caused by a missing or incorrect validation process, known as nonce validation, on the maybe_disconnect_simpleshop function. This means that even unauthenticated attackers can exploit the vulnerability by tricking a site administrator into clicking on a link.