Input validation vulnerability in Image Captcha 1.2

The Image Captcha plugin used in WordPress has a security issue known as Cross-Site Request Forgery. This problem affects all versions of the plugin, including version 1.2. The vulnerability is caused by a missing or incorrect security measure that checks for a special code. This allows hackers to make changes to the plugin’s settings without being authenticated, as long as they can trick a site administrator into taking a certain action, like clicking on a link.