The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF. Date published : 2019-08-30 https://wordpress.org/plugins/visitors-traffic-