Input validation vulnerability in Category Post List Widget 2.0

The Category Post List Widget plugin for WordPress is vulnerable to a type of cyber attack called Cross-Site Request Forgery in all versions up to 2.0. This type of attack occurs when an attacker is able to trick a website administrator into clicking on a link or performing an action. This can be done because the plugin fails to validate or protect against this type of attack. If an attacker is successful, they can change the plugin’s settings, including injecting malicious code, such as a virus.