WordPress Contact Form Maker plugin version 1.13.1 suffers from a cross site request forgery vulnerability.