Input validation vulnerability in Album and Image Gallery plus Lightbox 1.6.2

The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to a type of attack known as Cross-Site Request Forgery. This vulnerability exists in versions up to and including 1.6.2 and is caused by missing or incorrect security measures on two of its AJAX actions. This means that unauthenticated attackers could potentially exploit this security flaw by tricking a site administrator into clicking on a malicious link. If successful, the attacker could change attributes of images used by the plugin in slideshows.