The WP Global Screen Options plugin for WordPress versions up to and including 0.2 is vulnerable to Cross-Site Request Forgery (CSRF) due to missing nonce validation on the updatewpglobalscreenoptions action handler. This vulnerability allows unauthenticated attackers to modify global screen options for all users if an administrator is tricked into performing an action such as clicking a malicious link.