Better Notifications for WP < 1.9.3 - Cross-Site Request Forgery (CSRF)

The plugin does not protect its handle_actions function against CSRF attacks, allowing an unauthenticated attacker to enable or disable notifications by tricking a logged in administrator to submit a crafted request.