Input validation vulnerability in WPS Limit Login 1.4.6.1

The WPS Limit Login plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery in versions up to 1.4.6. This type of attack can happen when a website administrator clicks a malicious link. Without the correct type of security, malicious attackers can use this link to perform administrative actions on the website, such as changing information or deleting data. The plugin does not have the correct security measures in place, leaving it vulnerable to this type of attack.