Input validation vulnerability in magayo Lottery Results 2.0.12

The magayo Lottery Results plugin for WordPress has a security issue called Cross-Site Request Forgery. This means that versions up to 2.0.12 are vulnerable. The problem is that the plugin does not properly check for a special code called a nonce on the ‘magayo-lottery-results’ page. This could allow someone who is not logged in to change settings and add harmful code to the website. They would have to trick the person in charge of the website into clicking on a link to do this.