Input validation vulnerability in JobScout 1.1.4

The JobScout theme for WordPress has a security issue called Cross-Site Request Forgery. This can happen in versions 1.1.4 and below. The problem is that the jobscout_update_admin_notice() function doesn’t properly check for a specific code, called a nonce. This allows hackers who are not logged in to the site to get rid of important messages by tricking the site’s administrator into doing something, like clicking on a fake link.