Bad code sample: Cross Site Request Forgery (CSRF) vulnerability

bad-code-sample-cross-site-request-forgery.php

<?php 

  public static function render_settings_page() {
          if ( isset( $_POST['save_settings'] ) ) {
                  self::save_settings( $_POST );
          }

          wp_enqueue_style( 'cew-settings', CEW_URL . 'assets/css/settings.css', array(), CEW_VERSION );
          wp_enqueue_script( 'cew-settings', CEW_URL . 'assets/js/scripts.js', array( 'jquery', 'jquery-ui' ), CEW_VERSION, true );

          wp_localize_script(
                  'cew-settings',
                  'cew',
                  array(
                          'ajax_url' => admin_url( 'admin-ajax.php' ),
                  )
          );

          include_once CEW_PATH . '/templates/settings.php';
  }