WordPress WP Limits plugin cross-site request forgery vulnerability

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WP Limits plugin is a WordPress open source application plugin. WordPress WP Limits plugin in version 1.0 and earlier is vulnerable to cross-site request forgery, which stems from a failure to perform CSRF checks when saving its settings. An attacker could exploit this vulnerability to allow the login administrator to change these settings, which could make the blog unstable by setting low values.