Input validation vulnerability in XPD Reduce Image Filesize 1.0

The XPD Reduce Image Filesize plugin for WordPress has a security issue that allows attackers to manipulate the plugin’s settings and inject harmful code onto a website. This vulnerability affects all versions up to and including 1.0. It occurs because the plugin does not properly validate a key used for security checks. This means that if a site administrator is tricked into clicking on a link, an attacker can make changes to the plugin without being authenticated.