DoFollow Case by Case <= 3.4.2 Cross-Site Request Forgery via getEmail and getUrl

The DoFollow Case by Case plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4.2. This is due to missing or incorrect nonce validation on the 'getEmail' and 'getUrl' functions. This makes it possible for unauthenticated attackers to add emails and URLs to the plugin's allowlist via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.