Input validation vulnerability in WP Users Media 4.2.3

The WP Users Media plugin for WordPress is vulnerable to a security issue called Cross-Site Request Forgery. This issue affects all versions up to, and including version 4.2.3. The issue occurs because the plugin did not properly validate requests, meaning that an attacker could make changes to the plugin settings by tricking the site administrator into clicking on a malicious link.