bbPress Login Register Links On Forum Topic Pages <= 2.7.5 - Cross-Site Request Forgery

The bbPress Login Register Links On Forum Topic Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.5. This is due to missing nonce validation on the bbPressCustomMenu(), tomas_bbPressLoginAdminBar(), tomas_bbPressCustomLoginRedirect(), and tomas_bbPressCustomLoginLinks() function. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.