Input validation vulnerability in Travel Monster 1.1.2

The Travel Monster theme for WordPress has a security issue that could put your website at risk. This issue, called Cross-Site Request Forgery, affects versions up to 1.1.2. It happens because the travel_monster_update_admin_notice() function doesn’t properly check for a security code. This means that someone without permission could trick a website administrator into doing something, like clicking a link, that could dismiss important notices.