Input validation vulnerability in Split Test For Elementor 1.6.9

The Split Test For Elementor plugin for WordPress is vulnerable to a security issue called Cross-Site Request Forgery. This affects all versions of the plugin up until the most recent one (1.6.9). The problem is that it doesn’t properly validate a piece of code called a “nonce”, which is used to protect against attackers. This means that attackers could potentially trick an administrator into clicking a link and performing an unknown action. It’s not clear what kind of harm this vulnerability could cause.