mr_mat vulnerabilities and threats

The Remove meta boxes per user role WordPress plugin up to version 1.01 is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to missing or incorrect nonce validation on its settings page. This vulnerability allows unauthenticated attackers to trick site administrators into modifying or resetting meta box visibility settings for user roles via forged requests. The vulnerability has a medium severity rating with a CVSS score of 4.3.