Input validation vulnerability in WP Sticky Social 1.0.1

The WP Sticky Social plugin for WordPress has a security vulnerability that affects versions up to 1.0.1. This vulnerability allows anyone who can trick a site administrator to click on a link to modify the plugin’s settings and inject malicious web scripts. This is because the plugin does not properly validate requests, meaning it does not check if the request is coming from the administrator.