Description The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF. References https://wordpress.org/plugins/twitter-cards-meta/#developers