Input validation vulnerability in FoxyPress 0.4.9

The FoxyPress plugin for WordPress is vulnerable to a type of cyber attack called Cross-Site Request Forgery in versions up to and including 0.4.9. This is because of a lack of validation on certain functions. This means that if someone is able to trick a site administrator, for example by getting them to click on a link, then an unauthenticated attacker could do something called an SQL Injection attack.