Input validation vulnerability in Freesoul Deactivate Plugins – Plugin manager and cleanup 2.1.4

The Freesoul Deactivate Plugins – Plugin manager and cleanup plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This issue affects all versions of the plugin up to version 2.1.4. The problem is that the plugin does not properly validate a certain security feature, called a nonce, which is used to prevent malicious requests. Because of this, attackers can try to trick an administrator into clicking a link or performing an action, which triggers a malicious request that exploits the vulnerability.