WordPress Add From Server plugin version 6.2 suffers from a cross site request forgery vulnerability. Continue reading...