github.com/WordPress/WordPress/commit/263831a72d08556bc2f3a328673d95301a152829
hackerone.com/reports/153093
seclists.org/oss-sec/2017/q1/562
sumofpwn.nl/advisory/2016/cross_site_request_forgery_in_wordpress_press_this_function_allows_dos.html
wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/