Input validation vulnerability in Urvanov Syntax Highlighter 2.8.33

The Urvanov Syntax Highlighter plugin for WordPress has a security issue that affects versions up to 2.8.33. This means that unauthenticated attackers can use a forged link to perform certain actions, like saving, submitting, duplicating, and deleting syntax highlighting blocks, without the site administrator’s knowledge. This is because the plugin is missing or incorrect nonce validation on the init_ajax function.