Input validation vulnerability in Browser Sniff 2.3

The Browser Sniff plugin for WordPress has a security issue called Cross-Site Request Forgery. This can happen in all versions up to 2.3 because the plugin does not properly check for a security code on a certain function. This means that someone who is not logged in and has bad intentions could change the plugin’s settings and add harmful code to the website by tricking the site’s owner into doing something, like clicking on a link.