Input validation vulnerability in WPCS – WordPress Currency Switcher Professional 1.2.0.1

A popular plugin for WordPress called WPCS has a security issue that affects versions 1.2.0.1 and earlier. The problem is that the plugin does not properly check for a special code when saving certain information, leaving it open to attacks from people who are not authorized to access it. This means that someone could change the plugin’s settings without permission if they can get a website admin to do something, like click on a link.