WordPress Qubely plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. cross-site request forgery vulnerability exists in versions prior to 1.7.8 of the Qubely plugin for WordPress, which stems from the lack of authorization and CSRF checks on the Qubely_delete_saved_block AJAX operation. An attacker could use this vulnerability to delete arbitrary posts.