Input validation vulnerability in WP-ISPConfig 3 1.5.6

The WP-ISPConfig 3 plugin for WordPress has a security issue called Cross-Site Request Forgery. This problem affects all versions up to 1.5.6 and is caused by a missing or wrong security check on a function. This means that attackers who are not logged in can change settings and insert harmful code into a website if they can trick the site’s administrator into taking an action, like clicking on a link.