Description
WordPress Plugin CMS Tree Page View is prone to multiple vulnerabilities, including cross-site request forgery and privilege escalation vulnerabilities. Exploiting these issues could allow an attacker to perform certain administrative actions and gain unauthorized access to the affected application, or to create arbitrary posts. WordPress Plugin CMS Tree Page View version 1.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.5 or latest
References
http://pvagenas.com/vulnerabilities/cms-tree-page-view-csrf-privilege-escalation/
https://pvagenas.com/vulnerabilities/cms-tree-page-view-csrf-privilege-escalation-2/
https://www.exploit-db.com/exploits/43485/
https://plugins.svn.wordpress.org/cms-tree-page-view/trunk/readme.txt