Input validation vulnerability in Apollo13 Framework Extensions 1.9.1

The Apollo13 Framework Extensions plugin for WordPress is not secure in versions up to 1.9.1. This means that if a malicious person can find a way to trick a site administrator, like getting them to click on a link, they can add and delete posts from the website without being authenticated. This is because the plugin does not have the right kind of security protection called nonce validation on the a13fe_nava_add_post and a13fe_nava_delete_post functions.