Input validation vulnerability in Fluid Checkout for WooCommerce – Lite 2.3.1

The Fluid Checkout for WooCommerce – Lite plugin for WordPress may be vulnerable to Cross-Site Request Forgery in versions up to and including 2.3.1. This is because the plugin’s ‘dismiss_notice’ function does not have the right security measures to protect it. This could mean that an unauthenticated attacker could send a forged request to trick an administrator into clicking on an unwanted link. This could then lead to the attacker dismissing the plugin’s admin notifications.