ARMember < 4.0.6 - ARMember Cross-Site Request Forgery

The plugin does not properly validate nonces in the arm_check_user_cap function, leading to a potential Cross-Site Request Forgery vulnerability. As a result, unauthenticated users can carry out actions without appropriate permissions, provided they manage to mislead a site administrator into clicking on a manipulated link.