Input validation vulnerability in Sunny Search 1.0.2

The Sunny Search plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery in versions 1.0.2 and below. This happens because the plugin does not properly check who is making a request on the trySave() function. This means that if someone who is not an authenticated user of the website can trick a website administrator into doing something, such as clicking a link, they can alter the plugin’s settings.