Input validation vulnerability in Counter Box – WordPress plugin for countdown, timer, counter 1.2.3

A popular WordPress plugin called “The Counter Box” has a security vulnerability that allows hackers to delete countdowns, timers, and counters on WordPress websites. This vulnerability, known as Cross-Site Request Forgery, affects all versions of the plugin up to 1.2.3. The issue is caused by a lack of proper validation on the “counter-box” page, which means that attackers can exploit it even without being logged in. They can do this by tricking a site administrator into clicking on a malicious link.