Input validation vulnerability in Product Catalog Simple 1.8.4

The Product Catalog Simple plugin for WordPress has a security issue called Cross-Site Request Forgery. This can affect all versions, including 1.8.4. The problem is that there is a function that doesn’t properly check for a special code, which can allow someone who is not authorized to perform an action on the site. They can do this by tricking the site administrator into clicking on a link.