Input validation vulnerability in Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction 2.10.4

The Paid Member Subscriptions plugin for WordPress has a security vulnerability in versions up to 2.10.4. This vulnerability means that unauthenticated attackers can make changes to log entries without authorization. This can happen if the attackers can get a site administrator to do something, like click on a link. To fix this, the plugin needs to have nonce validation on the ajax_add_log_entry function.