Input validation vulnerability in IS-theme-companion 1.57

The IS-theme-companion plugin for WordPress has a security vulnerability in all versions up to and including 1.57. This is because the plugin does not properly check for a special code called a “nonce” when performing a certain function. This means that someone without a username and password could trick a website administrator into doing something without permission, like clicking on a link.