Input validation vulnerability in Occasions 1.1

The Occasions plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery in versions up to and including 1.1. This is because the ‘occasions.php’ file does not have enough protection. This kind of vulnerability makes it possible for people who are not authorized to access the site to gain access to administrative functions. This can result in XSS (cross-site scripting) if the attackers can get a site administrator to click on a link.