Input validation vulnerability in Simple Rating 1.4

A plugin called Simple Rating for WordPress has a security issue called Cross-Site Request Forgery. This affects all versions up to 1.4. The problem is that the plugin doesn’t properly check for a specific code, making it possible for someone without authorization to change settings and add harmful code to a website. This could happen if they trick the person in charge of the website into clicking on a link.