Input validation vulnerability in Kalium 3 | Creative WordPress & WooCommerce Theme 3.18.3

The popular Kalium 3 theme for WordPress, which is used for creative websites and online stores, has a security flaw that allows hackers to perform unauthorized actions. This vulnerability, known as Cross-Site Request Forgery, exists in all versions up to 3.18.3. The issue stems from a function that is missing or does not properly validate a security code. This means that attackers who are not logged into the website can manipulate a site administrator into unknowingly performing an action, such as clicking on a malicious link, that gives them access to the site.