CVE-2018-6656

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...