The kento-post-view-counter plugin up to and including 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF.
kentothemes kento-post-view-counter