Access violation vulnerability in Portfolio and Projects 1.3.7

The Portfolio and Projects plugin for WordPress has a security vulnerability in versions up to and including 1.3.7. Attackers can potentially take advantage of this vulnerability by tricking a site administrator into clicking on a malicious link. This would allow the attackers to dismiss any notices on the website without the administrator’s permission. To protect against this, the plugin must have the correct nonce validation on the ‘wpos_anylc_admin_init_process’ function.