WordPress <= 4.2.3 - CSRF

This vulnerability is in wp-admin/post.php. It allows an attacker to hijack the authentication of administrators for requests which lock a post. And then an attacker consequently cause a denial of service via a get-post-lock action.

Solution

           Update the plugin.