Input validation vulnerability in Remove slug from custom post type 1.0.3

The Remove slug from custom post type plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This security flaw affects versions up to and including 1.0.3. It is caused by the menu_page() function not having the right security measures, meaning that unauthenticated attackers can change the plugin’s settings by making a fake request. To do this, they would have to trick a site administrator into clicking on a malicious link.