The wp-better-permalinks plugin prior to 3.0.5 for WordPress has CSRF.
wp better permalinks project wp better permalinks