Input validation vulnerability in Merge + Minify + Refresh 1.10.8

The Merge + Minify + Refresh plugin for WordPress is a tool that can be used to make websites run faster. Unfortunately, it has a security flaw in versions up to and including 1.10.7 that can be exploited by unauthenticated attackers. This is because the plugin does not validate nonce, which is a security measure to prevent malicious requests. This vulnerability allows attackers to trick logged-in users into clicking on a link that could allow them to access and manipulate files on the website.