WordPress MiwoFTP 1.0.5 CSRF / Cross Site Scripting

WordPress MiwoFTP plugin version 1.0.5 suffers from cross site request forgery and cross site scripting vulnerabilities.