WP Prayer < 1.5.5 - Unauthorised AJAX call via CSRF

The plugin did not properly check for CSRF in its wpe_ajax_call AJAX action, which then call other method dynamically, allowing attacker to make user perform unwanted actions