Input validation vulnerability in Woody code snippets – Insert Header Footer Code, AdSense Ads 2.3.10

The Woody code snippets plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This means that in versions 2.3.9 and earlier, attackers may be able to activate or deactivate snippets without proper authorization. To do this, an attacker must be able to get a site administrator to perform an action such as clicking on a link. This is possible because the plugin doesn’t have the correct security measures in place to prevent it.