WordPress Googmonify Plugin 0.8.1 - XSS/CSRF

Vulnerable Code : googmonify.php - Line 190,194,208input id="PID" name="PID" type="text" value="?php echo $pid; ?"input id= "Limit" name="Limit" type="text" value="?php echo $limit;?" size="5"...