#WordPress nonce

CSRF Protection in Forms and APIs — Anti-CSRF Tokens That Actually Work

Your form sends data to the server. Your user is authenticated. An attacker, with a simple link or a crafted image, can...