Input validation vulnerability in WPVN – Username Changer 0.7.8

A plugin for WordPress called WPVN – Username Changer has a security issue. This issue, called Cross-Site Request Forgery, affects all versions of the plugin up to 0.7.8. The problem is that the plugin does not properly check for a special code that helps prevent unauthorized actions. This means that someone who is not logged in to the website can trick the website administrator into doing something they shouldn’t, like clicking on a harmful link.