Input validation vulnerability in Himer – Social Questions and Answers WordPress Theme 2.1.2

The Himer theme for WordPress has a security issue called Cross-Site Request Forgery. This affects all versions up to and including 2.1.2. The problem is caused by a missing or incorrect check for a special code (nonce) on a specific function. This means that attackers who are not logged in can send invitations to join private groups by tricking a website administrator into clicking a link.