Input validation vulnerability in Grab & Save 1.0.4

The Grab & Save plugin for WordPress is vulnerable to a type of cyber attack called Cross-Site Request Forgery in versions up to 1.0.4. This is because the plugin did not properly validate a security feature known as a “nonce”, which helps protect websites from malicious attacks. This vulnerability makes it possible for unauthenticated attackers to upload images without the site administrator’s knowledge, as long as they can trick the administrator into clicking on a link.