Input validation vulnerability in Notify Odoo 1.0.0

The Notify Odoo plugin, used for WordPress, has a security issue called Cross-Site Request Forgery. This happens in all versions, including 1.0.0, because a certain function is not properly checked for security. As a result, people who are not logged in can change settings and insert harmful code into a website by faking a request. They can do this if they can trick the website’s administrator into doing something, like clicking on a link.