Input validation vulnerability in Q and A 1.0.6.2

The Q and A plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This plugin is affected if it is using versions 1.0.6.2 or earlier. The problem is that the security measures that are meant to protect the plugin, called “nonce validation”, do not work properly. This means that people who are not authorized to access the plugin can potentially use it to perform malicious actions, such as running malicious code or accessing data they’re not supposed to. These types of attacks are explained in more detail in a reference.