Description The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF. References https://wordpress.org/plugins/jayj-quicktag/#developers