The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.
Published August 14, 2019.
Simple-membership-plugin Simple Membership