Description The companion-auto-update plugin before 3.2.1 for WordPress has CSRF. References https://wordpress.org/plugins/companion-auto-update/#developers