Input validation vulnerability in Current Menu Item for Custom Post Types 1.5

The Current Menu Item for Custom Post Types plugin, which is used by WordPress websites, has a security vulnerability in versions up to and including 1.5. This vulnerability is known as Cross-Site Request Forgery. It is caused by the cmicpt_view() function not having the proper security measures, such as nonce validation. This makes it possible for unauthenticated attackers to modify the plugin’s settings if they are able to get a site administrator to do something, like click on a link.