Input validation vulnerability in ValidateCertify Free 1.6.2

The ValidateCertify Free plugin for WordPress has a security issue called Cross-Site Request Forgery. This can happen in any version up to 1.6.2. The problem is that the plugin does not check for a specific code, called a nonce, when performing a certain function. This can allow someone without proper authorization to make the site administrator do something they shouldn’t, like clicking on a harmful link.