Input validation vulnerability in WP Custom Cursors | WordPress Cursor Plugin 3.0

The WP Custom Cursors plugin for WordPress has a security flaw that affects versions 3.0 and below. Attackers who manage to get a website administrator to click on a link can use it to alter the cursors on the website. This is because the plugin does not use the correct safety measures to protect against something called Cross-Site Request Forgery. This security issue can be found in the ~/wp-custom-cursors-add-new.php file.