Input validation vulnerability in FlashCounter 1.1.8

The FlashCounter plugin used in WordPress has a security issue called Cross-Site Request Forgery. This affects all versions up to 1.1.8. The problem is caused by not properly checking for a security code in a function. This allows hackers to change settings and insert harmful code into a website through a fake request, as long as they can trick the website administrator into clicking a link.