Input validation vulnerability in Cyrlitera – transliteration of links and file names 1.2.0

A plugin called Cyrlitera, which helps with translating links and file names on WordPress, has a security issue. This issue, known as Cross-Site Request Forgery, affects all versions of the plugin up to 1.2.0. It is caused by a mistake in how the plugin checks for a special code, called a nonce. This mistake allows attackers who are not logged in to the website to perform an action that they should not be able to do. They can do this by tricking a site administrator into clicking on a link.