Input validation vulnerability in Hyphenator 5.1.5

The Hyphenator plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This vulnerability affects versions up to and including 5.1.5. The vulnerability is due to the hyphenator_update() function not having the necessary security controls in place. An unauthenticated attacker could potentially use this vulnerability to modify the plugin’s settings. All they would have to do is get a site administrator to click on a malicious link.