Input validation vulnerability in Custom Login And Signup Widget 1.0

The plugin called Custom Login And Signup Widget for WordPress has a security issue in all versions up to 1.0. This is because the file /frndzk_adminclsw.php does not properly check for a special code called a nonce. This can allow people who are not logged in to change the email and username settings if they can trick the person in charge of the website into doing something, like clicking on a link.