Input validation vulnerability in Waiting: One-click countdowns 0.6.2

The Waiting plugin for WordPress is vulnerable to a type of attack known as Cross-Site Request Forgery in versions up to 0.6.2. This is because the plugin does not have enough safety measures in place to protect against this type of attack. This means that an attacker can create and delete countdowns without being authenticated, as long as they can trick a site administrator to click on a link.