WordPress Bitcoin / Altcoin Faucet Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WoWordPress Bitcoin / Altcoin Faucet 1.6.0 and earlier versions are vulnerable to cross-site request forgery, which stems from not doing any CSRF checks when saving its settings, and can be exploited by attackers to launch cross-site request forgery attacks, due to lack of cleanup and escaping could also lead to the storage of cross-site scripts.