Input validation vulnerability in Better Search – Relevant search results for WordPress 2.5.2

The Better Search plugin for WordPress, which is used to help people search for content on WordPress websites, is vulnerable to Cross-Site Request Forgery in versions 2.5.2 and earlier. This means that unauthenticated attackers can use a fake request to import and export settings, as long as they can get a site administrator to do something like click on a link. To protect against this, the plugin needs to include nonce validation on the bsearch_process_settings_import() and bsearch_process_settings_export() functions.