Input validation vulnerability in WPsoonOnlinePage 1.9

The WPsoonOnlinePage plugin for WordPress is vulnerable to a security issue called Cross-Site Request Forgery. This means that in versions up to and including 1.9, it is possible for an unauthenticated attacker to perform an unauthorized action on a website, such as clicking on a certain link, by tricking the site administrator. This is because the plugin does not have enough protection in place, known as a “nonce validation,” to prevent this type of attack.