Input validation vulnerability in WP Finance 1.3.6

The WP Finance plugin for WordPress has a security flaw that can be exploited by anyone, even those who are not authorized to access the website. This vulnerability is present in all versions, up to 1.3.6. The issue lies in the lack of proper security checks on the ‘wpfinance’ page, allowing attackers to manipulate settings and insert harmful code into the site. They can do this by tricking a site administrator into taking a certain action, such as clicking on a link.