Input validation vulnerability in TextBuilder 1.1.1

The TextBuilder plugin for WordPress has a security issue in versions 1.0.0 to 1.1.1. This is because it does not properly check for a special security code when using the ‘handleToken’ function. This means that someone who is not logged in could change a user’s authorization code by tricking a site administrator into clicking a link. If this happens, the attacker can change the user’s password and email address.