Input validation vulnerability in WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts 2.4.1

The WP Project Manager plugin for WordPress, versions up to and including 2.4.0, is vulnerable to a type of attack called Cross-Site Request Forgery. This attack is possible because of missing or incorrect validation of a security feature called a nonce. An unauthenticated attacker can use a forged request to try to trick a site administrator into performing an action, such as clicking on a link.