Input validation vulnerability in Post State Tags 2.0.6

The Post State Tags plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This is an issue that affects versions up to 2.0.6 of the plugin. The issue is due to missing security measures called nonce validation on the admin_init function. This means an unauthenticated attacker can reset the plugin’s settings by sending a malicious request, if they can trick a site administrator into clicking a link or taking another action.