Input validation vulnerability in MStore API 3.9.6

The MStore API plugin for WordPress has a security vulnerability that allows unauthenticated attackers to change the firebase server key for push notifications when an order status changes. This could happen if an attacker tricked an administrator into clicking a malicious link. To prevent this from happening, the plugin needs to have nonce validation added to its mstore_update_firebase_server_key function.