CVE-2017-18511by Jeremyin Security Bulletinson Posted on August 14, 2019 The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.