EPSS
Percentile
26.3%
The plugin does not have CSRF check in place when deleting code created by the plugin, which could allow attackers to make a logged in admin delete arbitrary ones via a CSRF attack
https://example.com/wp-admin/admin.php?page=wp-coder&info=del&did=1