Input validation vulnerability in Login/Signup Popup ( Inline Form + Woocommerce ) 2.4

The Login/Signup Popup plugin for WordPress is vulnerable to a type of attack known as Cross-Site Request Forgery in versions up to 2.3. This means that if the plugin was not properly updated, an unauthenticated attacker could trick a site administrator into performing an action such as clicking on a link, and reset the plugin’s settings. This is due to a lack of security measures, such as nonce validation, on the reset_settings() function.