< 1.3.2
1.3.2
The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.