Input validation vulnerability in Civi Framework 2.1.6.3

The Civi Framework plugin for WordPress has a security issue called Cross-Site Request Forgery. This can happen in any version up to 2.1.6.3. The problem is that a certain function does not check for a specific code, which allows attackers who are not logged in to make someone with administrative privileges do something without permission. They can do this by getting the site administrator to click on a link.