There is CSRF in the CopySafe Web Protection plugin prior to 2.6 for WordPress, allowing malicious users to change plugin settings.
artistscope copysafe web protection