Input validation vulnerability in ActiveDEMAND 0.2.43

The ActiveDEMAND plugin for WordPress has a security issue called Cross-Site Request Forgery, which affects all versions up to 0.2.43. This problem is caused by a feature that doesn’t properly check for a specific code, which means that unauthorized individuals could potentially perform actions on your website if they can manipulate a site administrator into clicking on a link. It’s unclear what harm could come from this vulnerability.