Input validation vulnerability in Delete Usermetas 1.1.2

The Delete Usermeta plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery (CSRF) in versions up to and including 1.1.2. This is because the plugin does not have the proper security measures in place to protect it from this type of attack, specifically on the delumet_options_page() function. This means that an attacker who is not authenticated (not logged in) can remove user meta for any user on a website if they can trick a site administrator into performing an action such as clicking on a link.