Security WordPress PWG Random 1.11 CSRF / XSS December 18, 2014 007admin Leave a comment WordPress PWG Random plugin version 1.11 suffers from cross site request forgery and cross site scripting vulnerabilities.