Input validation vulnerability in acobot 2.0

An attacker could exploit multiple security weaknesses in the Acobot Live Chat & Contact Form plugin 2.0 for WordPress to gain access to an administrator’s account. This could be done to change the plugin settings or to carry out attacks that embed malicious code on the website. These attacks can be done by manipulating the acobot_token parameter in a page of the plugin that is located in the WordPress admin section.