Input validation vulnerability in IndieAuth 4.5.4

The IndieAuth plugin used in WordPress has a security vulnerability in all versions up to 4.5.4. This is because it does not properly verify the authenticity of login information and authorization requests from external applications. This means that someone without proper authorization can trick a logged-in user into approving access to their account, giving them the ability to create, update, and delete content.