Input validation vulnerability in WP Optimizer 2.3.6

The WP Optimizer plugin for WordPress has a security issue that affects all versions up to 2.3.6. This is because the plugin does not properly check for a specific code known as a “nonce” when a certain function is performed. As a result, attackers who are not logged in to the website can manipulate the site administrator into unknowingly taking an action, such as clicking on a link, that gives the attacker unauthorized access.