Input validation vulnerability in Frontpage category filter 1.0.2

A plugin called “Frontpage category filter” for WordPress has a security issue that could make it vulnerable to a type of attack called Cross-Site Request Forgery. This can happen in all versions of the plugin, including the latest one (1.0.2). The problem is that the plugin doesn’t properly check for a security code called a “nonce” when performing a certain function. This could allow someone who isn’t authorized to carry out actions on the site to trick a site administrator into doing something, like clicking on a link.