Input validation vulnerability in Heureka 1.0.8

The Heureka plugin for WordPress has a security issue called Cross-Site Request Forgery. This affects all versions up to and including 1.0.8. The problem is caused by a missing or incorrect security check on an unknown function. This means that attackers who are not logged in can trick a site administrator into unknowingly performing an action, like clicking on a link. We are not sure how serious this vulnerability is.