Input validation vulnerability in IP2Location World Clock 1.1.9

The “IP2Location World Clock” plugin for WordPress has a security issue that can affect all versions up to 1.1.9. This is because the plugin does not properly check for a special code called a “nonce” when performing certain tasks. This means that someone who is not logged in or authorized to make changes could potentially change the plugin’s settings or add harmful code to a website by tricking a site administrator into clicking on a link.