WordPress Download Manager plugin version 2.9.60 suffers from a cross site request forgery vulnerability.