Input validation vulnerability in CAS Maestro 1.1.3

The CAS Maestro plugin for WordPress has a security issue that could put websites at risk. This problem affects all versions up to 1.1.3 and is known as Cross-Site Request Forgery. It happens because the plugin does not properly check for a special code called a nonce. This loophole could allow hackers to change settings and insert harmful code on a website, as long as they can trick the website administrator into doing something like clicking on a link.