Input validation vulnerability in WP-TopBar 4.02

The WP-TopBar plugin for WordPress is vulnerable to something called Cross-Site Request Forgery in versions up to, and including, 4.02. This means that there is missing or incorrect protection on the admin pages that would normally prevent unauthorized access. Without this protection, it is possible for someone who is not authorized to gain access to restricted areas and perform malicious activities, like Stored Cross-Site Scripting attacks, by tricking a site administrator into clicking on a link.