Input validation vulnerability in Sidebar Manager Light 1.1.8

The Sidebar Manager Light plugin for WordPress has a security issue called Cross-Site Request Forgery. This problem exists in all versions up to 1.1.8, where a certain function does not properly check for a security measure called a “nonce”. Because of this, hackers who are not logged in can change settings and insert harmful code onto a website by tricking the site administrator into doing something, like clicking on a link.