WordPress WP Google Tag Manager plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress plugin WP Google Tag Manager version 1.1 and earlier versions. The vulnerability stems from a web application that does not adequately validate that a request is coming from a trusted user. An attacker can use this vulnerability to spoof malicious requests to trick victims into clicking on them to perform sensitive actions.