The WP Admin Microblog plugin for WordPress versions up to and including 3.1.1 is vulnerable to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation on the 'wp-admin-microblog' page. This vulnerability allows unauthenticated attackers to potentially send messages on behalf of an administrator if they can trick the administrator into performing an action such as clicking a malicious link.