Input validation vulnerability in Entrada 5.7.7

The Entrada theme for WordPress has a security issue called Cross-Site Request Forgery. This problem affects all versions up to and including 5.7.7. Basically, there is a function that doesn’t check for the correct security code, making it possible for someone to trick a site administrator into doing something without permission. This can happen if the administrator clicks on a link without realizing its true purpose.