< 2.4.1
2.4.1
The wp-d3 plugin before 2.4.1 for WordPress has CSRF.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.