The acf-better-search (aka ACF: Better Search) plugin prior to 3.3.1 for WordPress allows wp-admin/options-general.php?page=acfbs_admin_page CSRF.
acf\\ better search project acf\\