Input validation vulnerability in Auto FTP 1.0.1

The Auto FTP plugin for WordPress has a security vulnerability that affects all versions up to 1.0.1. This is because it does not properly check for a specific code (called a nonce) when performing a certain function. This means that someone who is not logged in could potentially make changes to the plugin’s settings and add harmful code to the website if they can convince the site administrator to click on a link.