Input validation vulnerability in WP SexyLightBox 0.5.3

The WP SexyLightBox plugin for WordPress has a security issue that allows hackers to make unauthorized changes to the settings and insert harmful web codes. This vulnerability is present in all versions of the plugin up to 0.5.3. It happens because the plugin does not properly check for a special code (called a “nonce”) before carrying out certain functions. This means that if a site administrator is tricked into clicking on a link, an attacker can send a fake request and gain access to the site.