Input validation vulnerability in BestWebSoft's Twitter 2.14

The BestWebSoft Twitter plugin for WordPress has a security vulnerability in versions up to and including 2.14. This vulnerability makes it possible for an unauthenticated attacker to modify the plugin’s settings without authorization, if they can get a site administrator to click on a malicious link. This is due to the lack of nonce validation on the twttr_settings_page() function.