Input validation vulnerability in Zajax – Ajax Navigation 0.4

The Zajax – Ajax Navigation plugin for WordPress has a security issue called Cross-Site Request Forgery, which affects all versions up to 0.4. This happens because the plugin does not properly check a specific kind of code. This means that someone who is not logged in could change the plugin’s settings and insert harmful code into the website, as long as they can trick the site’s administrator into taking a certain action, like clicking on a link.