Input validation vulnerability in my-category-order 4.3

The My Category Order plugin for WordPress is vulnerable to a security issue called Cross-Site Request Forgery. This means that versions up to 4.3 of the plugin have a flaw that does not properly validate data. Attackers can take advantage of this flaw by tricking a site’s administrator to click on a malicious link which could allow them to inject web scripts that would run in the victim’s browser.