Another acronym of the day: CSRF (pronounced “sea surf”) (apparently WordPress is vulnerable?)