Input validation vulnerability in Hebrew Dates 2.1.0

The plugin called “Hebrew Date” for WordPress has a security issue called Cross-Site Request Forgery. This problem affects versions up to 2.1.0. It happens because the plugin does not properly check for a security code called “nonce” in the hebrewdate_subpanel() function. This allows attackers who are not logged in to make changes to the plugin’s settings and insert harmful code on a website by tricking the site administrator into clicking on a link.