Input validation vulnerability in Emergency Password Reset 8.0

The Emergency Password Reset plugin for WordPress, up to version 8.0, has a security vulnerability known as Cross-Site Request Forgery. This is because the index.php file is missing or has incorrect validation for a security measure called a nonce. This could allow attackers without authorization to change the plugin’s settings by tricking a site administrator into clicking a link or performing an action.