Input validation vulnerability in Style Manager – Auto-magical system to style your entire WordPress site 2.2.7

The Style Manager plugin for WordPress, which helps to style your entire WordPress site, has a security vulnerability called Cross-Site Request Forgery. This means that in versions up to 2.2.7, there is a problem with how the plugin checks for a special code to make sure that a request is legitimate. Because of this, an attacker who is not logged in to the site can make changes to the plugin’s settings if they can trick a site administrator into doing something, like clicking on a link.