Input validation vulnerability in LayerSlider 7.7.9

The LayerSlider plugin for WordPress is vulnerable to a security issue called Cross-Site Request Forgery (CSRF). A CSRF attack allows an attacker to make a website do something without the user’s knowledge or consent. This security issue affects LayerSlider versions 7.7.9 and earlier. It is caused by the missing or incorrect validation of a special code (called a “nonce”) on one of its functions. This makes it possible for unauthenticated attackers to exploit the vulnerability by tricking site administrators into clicking on a malicious link or performing other unwanted actions.