Input validation vulnerability in Simple Poll 1.1.1

The Simple Poll plugin for WordPress has a security issue called Cross-Site Request Forgery. This affects all versions up to and including 1.1.1. The problem is that the plugin does not properly check for a special code called a “nonce” when performing a specific task. This means that attackers who are not logged in can change settings and insert harmful code on a website if they can trick the site’s administrator into clicking on a certain link.