Input validation vulnerability in Insert Headers And Footers 3.1.1

A popular plugin for WordPress called “Insert Headers And Footers” has a security issue that allows hackers to make changes to a website without permission. This happens because the plugin does not properly check for valid permissions when a certain function is used. This means that someone who is not authorized to make changes to the website can trick an administrator into clicking on a link, and use that to gain access to the site and make changes. This could include giving themselves administrative privileges and even allowing users to register on the site. To exploit this issue, the plugin must be set to a certain mode.