Input validation vulnerability in Login/Signup Popup ( Inline Form + Woocommerce ) 2.4

The Login/Signup Popup plugin for WordPress is vulnerable to a type of cyber attack called Cross-Site Request Forgery. This vulnerability affects versions up to, and including, 2.3, as the plugin is missing a security measure called nonce validation on the reset_settings() function. This lack of security measure makes it possible for unauthenticated attackers to reset the plugin’s settings by tricking a site administrator into clicking on a malicious link, for example.