Input validation vulnerability in Cooked Pro 1.7.15.4

The Cooked Pro plugin for WordPress has a security issue that affects all versions up to 1.7.15.4. This means that attackers who are not logged in can trick a site administrator into performing an action, like clicking on a link, which allows them to reset templates. This vulnerability is caused by missing or incorrect validation of a security code called “nonce” on a specific function.