The mtouch-quiz plugin prior to 3.1.3 for WordPress has wp-admin/options-general.php CSRF.
mtouch quiz project mtouch quiz