Input validation vulnerability in Running Line 1.2

The Running Line plugin for WordPress is a vulnerable program. It is vulnerable to something called Cross-Site Request Forgery, which is a type of attack hackers can do. The vulnerability is present in versions up to and including version 1.2, and it is caused by a missing type of protection called “nonce validation” on the running_line_admin() function. This means that unauthenticated attackers can change the plugin’s settings and possibly add malicious web scripts.