Input validation vulnerability in Google Site Verification plugin using Meta Tag 1.2

The Google Site Verification plugin for WordPress, up to version 1.2, is vulnerable to Cross-Site Request Forgery. This means that an attacker can update the plugin’s settings without needing to be authenticated. The attacker only needs to get a site administrator to click on a link or perform another action. This is because the function used to update the settings does not use the security measure of nonce validation.