Input validation vulnerability in WP URL Shortener 1.2

The WP URL Shortener plugin for WordPress has a security issue called Cross-Site Request Forgery. This problem affects all versions up to 1.2, and is caused by a missing or incorrect security check on the ‘url_shortener_settings’ page. This means that hackers who are not logged in can change settings and insert harmful code on a website by tricking the site’s administrator into clicking on a link.