Input validation vulnerability in Category of Posts 1.0

The Category of Posts plugin used in WordPress has a security vulnerability known as Cross-Site Request Forgery. This vulnerability affects all versions up to and including version 1.0. The issue is caused by a function that does not properly validate a security code, known as a nonce. This allows attackers who are not logged in to the website to change settings and insert harmful web scripts by tricking a site administrator into taking an action, such as clicking on a link.