Input validation vulnerability in Subscribers Text Counter 1.7

The Subscribers Text Counter plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery (CSRF). This vulnerability affects versions of the plugin up to and including version 1.7. The vulnerability is present in a file called subscribers-text-counter-admin.php, which does not have procedures in place to verify the identity of the person making the request. This means that if an unauthenticated attacker can trick a site administrator into clicking a link or performing an action, the attacker can modify the plugin’s settings and inject malicious web scripts into the website.