The simple-membership plugin prior to 3.3.3 for WordPress has multiple CSRF issues.
simple-membership-plugin simple membership