Input validation vulnerability in Yahoo! WebPlayer 2.0.6

The Yahoo! WebPlayer plugin for WordPress has a security issue called Cross-Site Request Forgery. This problem affects all versions up to and including 2.0.6. The issue is caused by a function that does not properly check for a security token. This means that attackers who are not logged in can change settings and insert harmful code into a website by sending a fake request. They can do this by tricking the website administrator into clicking on a link.