Input validation vulnerability in Calculated Fields Form 1.1.120

The Calculated Fields Form plugin for WordPress is vulnerable to a security issue called Cross-Site Request Forgery. This means that versions of the plugin up to and including 1.1.120 may be vulnerable. This happens because the feedback_action function does not have adequate protection. This means that if an unauthorized person can trick a site administrator into clicking on a link, they can send a request that will be accepted as if it came from the site administrator.