Input validation vulnerability in Popularis Verse 1.0.1

The Popularis Verse theme for WordPress has a security issue called Cross-Site Request Forgery. This can happen in versions 1.0.1 and below. The problem is that there is a function that doesn’t properly check for a code called a “nonce”. This means that someone who isn’t logged in can trick the site’s administrator to do something without permission by getting them to click on a link.