Description The user-domain-whitelist plugin before 1.5 for WordPress has CSRF. References https://wordpress.org/plugins/user-domain-whitelist/#developers