The facebook-for-woocommerce plugin prior to 1.9.14 for WordPress has CSRF.
facebook facebook for woocommerce