Input validation vulnerability in oik 4.15.2

The oik plugin used in WordPress has a security issue called Cross-Site Request Forgery. This problem affects all versions up to 4.15.2. The reason for this vulnerability is that a certain function does not properly check for a special code that prevents unauthorized actions. As a result, attackers who are not logged in can trick a website administrator into performing an action, like clicking on a link, without permission.