Input validation vulnerability in WooHoo Newspaper Magazine Theme 2.5.3

The WooHoo Newspaper Magazine Theme is a WordPress plugin that has a security flaw in all versions up to 2.5.3. An attacker can take advantage of this vulnerability by sending a malicious link to a site administrator. If the administrator clicks on the link, the attacker can update the plugin’s settings without authentication. It is unclear what kind of harm this vulnerability could cause.