Input validation vulnerability in Czater.pl – live chat i telefon 1.0.5

The Czater.pl plugin for WordPress, which allows live chat and phone features, has a security issue. This issue, known as Cross-Site Request Forgery, affects all versions up to 1.0.5. The problem is that the plugin does not properly check for a special code called a nonce, which helps prevent unauthorized access. Because of this, attackers who are not logged in can change settings and insert harmful code by fooling a website administrator into clicking on a link.