Input validation vulnerability in Spotlight Social Feeds [Block, Shortcode, and Widget] 1.6.10

A plugin called “Spotlight Social Media Feeds” used for WordPress is at risk for a security issue called Cross-Site Request Forgery. This can happen in any versions up to 1.6.10. The problem is caused by a mistake in checking if the request is valid in the AuthCallbackListener class. This means that people without an account can trick a site administrator into doing something, like clicking on a link, and then connect to their account without being authorized.