Input validation vulnerability in Easy PayPal Events 1.2.1

The Easy PayPal Events plugin for WordPress has a security issue called Cross-Site Request Forgery. It affects all versions up to and including 1.2.1. This is because the function wpeevent_plugin_buttons() does not properly check for a unique code to verify the request. As a result, hackers without authentication can delete any post by tricking a site administrator into clicking a link.