Input validation vulnerability in Mandrill WP – Email Form Under Post 1.0.5

The Mandrill WP – Email Form Under Post plugin for WordPress has a security issue called Cross-Site Request Forgery. This affects all versions up to 1.0.5. The problem is that the plugin does not properly check for a special code that helps prevent unauthorized changes. As a result, hackers who are not logged in can change the plugin’s settings and insert harmful code into a website by tricking the site’s administrator into clicking on a deceptive link.