Input validation vulnerability in Newsletter subscription optin module 1.2.9

A plugin called Newsletter subscription optin module for WordPress has a security issue that makes it vulnerable to a type of attack called Cross-Site Request Forgery. This can happen in any version of the plugin up to 1.2.9. The problem is that the plugin does not properly check for a special code called a nonce, which is used to prevent these types of attacks. This means that someone who is not logged in or authorized can change the plugin’s settings or add harmful code to a website, as long as they can trick the website administrator into clicking a link.