Input validation vulnerability in Coachify 1.0.7

The Coachify WordPress theme has a security issue called Cross-Site Request Forgery, which affects versions 1.0.7 and below. This happens because the function coachify_update_admin_notice() does not properly check for a special code called a nonce. As a result, attackers who are not logged in can deceive a site administrator into doing something, like clicking on a link, that lets them dismiss important notices.