WordPress WP-Pro-Quiz plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress WP-Pro-Quiz plugin in version 0.37 and earlier is vulnerable to cross-site request forgery, which stems from a WEB application that does not adequately verify that requests are coming from trusted users. An attacker could delete arbitrary content on the blog via a logged-in administrator.