Input validation vulnerability in CRM: Contact Management Simplified – UkuuPeople 1.6.3

The UKUUPeople plugin for WordPress is vulnerable to a security risk called Cross-Site Request Forgery. This means that in versions of the plugin up to 1.6.3, someone could trick a site administrator into performing an action, such as clicking on a link, and use it to add or delete any favorite posts. This happens because the plugin does not validate the security measures known as nonce correctly.