Input validation vulnerability in Custom Post 1.0

A popular plugin for WordPress called “Custom Post” has a security issue that could potentially harm websites. This problem, known as Cross-Site Request Forgery, affects all versions of the plugin up to version 1.0. It occurs because the plugin does not properly check for a special code called a “nonce” when performing certain functions. This allows attackers who are not logged in to the website to change settings and insert dangerous code by tricking a site administrator into clicking on a link.