The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF.Referenceshttps://twitter.com/Sh0ckFR/status/1257298443527053313