Input validation vulnerability in Who Hit The Page – Hit Counter 1.4.14.3

The Who Hit The Page – Hit Counter plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This affects the versions of the plugin up to and including version 1.4.14.3. The issue is caused by an incorrect or missing security measure on an unknown function, which could allow an unauthenticated attacker to make a website administrator perform an unknown action, such as clicking a link. Unfortunately, it is not known what impact this vulnerability could have.