Input validation vulnerability in Simple Wp Sitemap 1.2.1

The Simple Wp Sitemap plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This means that versions of the plugin up to and including 1.2.1 are not secure. This is because the plugin has a feature that does not have the correct safeguards in place to make sure that only the right people can access it. As a result, an attacker could craft a link that an administrator would need to click on in order for the attack to be successful.