Input validation vulnerability in Woocommerce ESTO 2.23.1

The Woocommerce ESTO plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This means that unauthenticated attackers may be able to access and change settings within the plugin if an administrator is tricked into clicking on a malicious link. This vulnerability exists in versions of the plugin up to and including 2.23.1, and is caused by either the lack of or incorrect implementation of a security measure known as a nonce validation on the saveSetting function.