The Social Media WPCF7 Stop Words plugin for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability affecting all versions up to and including 1.1.3. The issue arises from missing or incorrect nonce validation in the smWpCfSwOptions() function, allowing unauthenticated attackers to update plugin settings by tricking a site administrator into performing an action such as clicking a malicious link.