Input validation vulnerability in Admin Menu Editor 1.12

The Admin Menu Editor plugin for WordPress has a security issue in versions 1.12 and earlier. This is because the plugin does not properly check for a specific code, called a nonce, when using the ajax_hide_hint() function. This means that attackers who are not logged in to the site can send a fake request to dismiss an important message, if they can convince the site owner to click on a link.