Input validation vulnerability in Twitter @Anywhere Plus 2.0

The Twitter @Anywhere Plus plugin for WordPress has a security issue that affects all versions up to 2.0. This is because it does not properly check for a code called a nonce, which helps prevent malicious requests. As a result, someone without authorization can change settings and add harmful code to a website if they can trick the website’s administrator into doing something, like clicking a link.