Input validation vulnerability in CRUDLab Google Plus Button 1.0.2

The plugin “CRUDLab Google Plus Button” for WordPress has a security issue that affects all versions, including 1.0.2. This vulnerability is known as “Cross-Site Request Forgery” and it happens because the plugin does not properly check for a security code when performing a specific function. This can allow unauthorized individuals to make changes to the plugin’s settings and add harmful code to a website, as long as they can trick a site administrator into clicking on a link.