The Publish 2 Ping.fm plugin for WordPress versions up to and including 1.1 is vulnerable to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation on a specific admin options page. This vulnerability allows unauthenticated attackers to trick site administrators into performing unwanted actions, such as updating settings or injecting malicious scripts via forged requests.