TI-2016-09259 CVE-2016-20083 · GHSA-rrrg-9wf8-2ph2WordPress More Fields Plugin 2.1 Cross-Site Request ForgeryPriority HIGH 70WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation.CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00134 · Published 2026-06-15 · No fix listed CWE-352