The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page.

Published Aug 30, 2019 · Updated Aug 5, 2024 · Assigned by mitre