Input validation vulnerability in Hotspots Analytics 4.0.12

The Hotspots Analytics plugin for WordPress has a security issue called Cross-Site Request Forgery. This affects all versions up to 4.0.12. The problem is that the plugin does not properly check for a unique code when performing a certain task. This allows attackers to make changes to the plugin’s settings and insert harmful code into websites, as long as they can trick the website administrator into taking an action, like clicking a link.