Input validation vulnerability in Social Links 1.0.11

The Social Links plugin for WordPress has a security issue called Cross-Site Request Forgery. This can happen in all versions up to 1.0.11 because the plugin doesn’t check for a security code correctly. This means that people who are not logged in can change the plugin’s settings and add harmful code to the website, as long as they can trick the person in charge of the website into doing something, like clicking on a link.