Input validation vulnerability in I Plant A Tree 1.7.3

The I Plant A Tree plugin for WordPress has a security issue that could allow hackers to make unauthorized changes to the plugin settings. This vulnerability, present in all versions up to 1.7.3, is caused by a lack of proper validation for a security feature called a “nonce” in the ipat_plugin_options() function. As a result, attackers could potentially trick a site administrator into clicking a malicious link or performing an action that would allow them to insert harmful code into the website.