Input validation vulnerability in Oxygen 4.4

The Oxygen plugin for WordPress can be vulnerable to a type of attack called Cross-Site Request Forgery in versions up to 4.4. This type of attack can occur when there is missing or incorrect validation of something called a nonce. This means that an unauthenticated attacker may be able to trick an administrator into performing an action, such as clicking on a link, by sending them a forged request.