Input validation vulnerability in ImageMapper 1.2.6

The ImageMapper plugin for WordPress is not secure in versions up to 1.2.6. Attackers who are not authenticated, meaning they don’t have permission to access the website, can still update the plugin settings. This could be done by tricking a site administrator into clicking a link. Nonce validation, which is a security measure, is missing or incorrect in the plugin, making this possible.