WordPress Far Future Expiry Header plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation’s set of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers.The WordPress Far Future Expiry Header plugin is vulnerable to cross-site request forgery, which stems from the lack of a valid CSRF check when the plugin saves settings, and can be exploited by attackers to make logged-in administrators change their settings through a CSRF attack.