Description The js-support-ticket plugin before 2.0.6 for WordPress has CSRF. References https://wordpress.org/plugins/js-support-ticket/#developers