Input validation vulnerability in Blizzard Quotes 1.3

A plugin called Blizzard Quotes for WordPress has a security issue called Cross-Site Request Forgery. This problem exists in all versions up to 1.3 because the plugin does not properly check for a special code called a nonce. This means that someone who is not logged in can change the plugin’s settings and add harmful code to a website if they can trick the person in charge into doing something like clicking on a link.