Input validation vulnerability in Block for Font Awesome 1.4.0

The Block for Font Awesome plugin for WordPress has a vulnerability in versions up to and including 1.4.0. Unauthenticated attackers can take advantage of this vulnerability and update the plugin’s settings without needing to be logged in. This is possible if an administrator clicks on a link or performs another action that the attacker has tricked them into doing. To fix this issue, the nonce validation on the getbutterfly_fa_build_admin_page() function must be updated.