The erident-custom-login-and-dashboard plugin prior to 3.5 for WordPress has CSRF.
erident custom login and dashboard project erident custom login and dashboard