Input validation vulnerability in Custom My Account for Woocommerce 2.1

The Custom My Account for Woocommerce plugin for WordPress is vulnerable to a security issue called Cross-Site Request Forgery. This affects all versions of the plugin up to and including version 2.1. The problem is due to either missing or incorrect validation of a certain function, which means that unauthenticated attackers could potentially trick a site administrator into performing an unknown action, like clicking a link. Unfortunately, the exact impact of this vulnerability is not known.