Input validation vulnerability in Kama Thumbnail 3.5.1

A plugin for WordPress called Kama Thumbnail has a security issue. This issue, called Cross-Site Request Forgery, can be found in versions 3.5.1 and below. The problem is that a function is not properly checking for a special code to prevent unauthorized actions. This means that someone who is not logged in can trick a website administrator into doing something they shouldn’t do by sending a fake request.