Input validation vulnerability in ShopSite 1.5.10

The ShopSite plugin for WordPress has a security issue that can be exploited by hackers. This vulnerability, which affects all versions up to 1.5.10, is caused by a problem with the way the plugin checks for a special code called a “nonce.” This means that attackers who are not logged in to the website can change its settings and insert harmful code by tricking the site’s administrator into clicking on a link.