WordPress St-Daily-Tip plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation’s set of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress St-Daily-Tip plugin has a cross-site request spoofing vulnerability in version 4.7 and earlier, which stems from a WEB application that does not adequately validate whether the request is from a trusted user. An attacker could use a spoofed malicious request to trick a victim into clicking through to perform a sensitive action.