WordPress PWG Random 1.11 CSRF / XSS

WordPress PWG Random plugin version 1.11 suffers from cross site request forgery and cross site scripting vulnerabilities.