WP Global Screen Options Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WP Global Screen Options plugin for WordPress, affecting all versions through 0.2. The vulnerability arises from a lack of nonce validation in the 'updatewpglobalscreenoptions' action handler. This flaw allows unauthenticated attackers to alter global screen options for all users by sending a forged request, provided they can deceive an administrator into clicking a link.

Impact

Exploitation of this vulnerability allows for unauthorized modification of global screen options for all users, including administrators.