Input validation vulnerability in Cooked Pro 1.8.0

The Cooked Pro plugin for WordPress, up to version 1.8.0, is at risk for Cross-Site Request Forgery. This is because the plugin does not properly check the validity of a security code, called a nonce, on a specific function. This leaves the plugin open to attacks from someone who is not logged in, allowing them to perform unauthorized actions if they can trick a site administrator into clicking a link.