Input validation vulnerability in Real Time Validation for Gravity Forms 1.7.0

The Real Time Validation for Gravity Forms plugin used in WordPress has a security issue called Cross-Site Request Forgery. This affects all versions up to 1.7.0. The problem is that the plugin does not properly check for a special code, called a nonce, which verifies that a user is authorized to perform a certain action. This means that someone without an account on the website can make a site administrator do something they shouldn’t, just by getting them to click on a link.