Input validation vulnerability in Ricerca – advanced search 1.0.15

The Ricerca plugin for WordPress is vulnerable to Cross-Site Request Forgery, a type of attack that can be used to alter the settings of the plugin without requiring authentication from the attacker. This vulnerability affects versions up to and including 1.0.15, as the plugin does not properly validate certain data that is sent when settings are changed. An attacker can exploit this by creating a link or other type of content that can trick a site administrator into clicking on it, which would then change the plugin settings without the admin knowing.