Input validation vulnerability in PayPal Express Checkout 2.1.2

The PayPal Express Checkout plugin for WordPress has a security vulnerability that affects all versions up to 2.1.2. This is because the plugin does not properly check for a specific code that helps prevent unauthorized actions. This means that someone who is not logged in can potentially trick a site administrator into taking an action, like clicking on a link, that they shouldn’t.