Input validation vulnerability in WP Affiliate Platform 6.5.1

The WP Affiliate Platform plugin for WordPress is not safe from an attack called Cross-Site Request Forgery. This can happen in any version up to 6.5.1, because the plugin does not properly check for a security code called a nonce when someone tries to delete an affiliate. This means that someone who is not logged in or authorized can trick a site administrator into deleting an affiliate by getting them to click on a link.