Input validation vulnerability in Auto Excerpt everywhere 1.5

The Auto Excerpt everywhere plugin for WordPress is vulnerable to a type of attack called a Cross-Site Request Forgery. It affects all versions up to and including version 1.5. This is because the plugin’s security measures, called nonce validation, are either missing or incorrect. This allows unauthenticated attackers to modify the plugin’s settings by tricking a site administrator into clicking on a link or performing another action.