The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation.