CVE-2018-5669by Jeremyin Security Bulletinson Posted on January 13, 2018 An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php.