Input validation vulnerability in wordpress publish post email notification 1.0.2.3

A popular plugin for WordPress, called “wordpress publish post email notification,” has a security issue that can make it vulnerable to attacks. This issue, known as Cross-Site Request Forgery, affects all versions of the plugin up to 1.0.2.3. Basically, the plugin doesn’t properly check for a unique code when performing certain functions, which could allow unauthorized users to make changes to the plugin settings. This could happen if a site administrator is tricked into clicking on a link.