Anti-Malware Security and Brute-Force Firewall <= 4.15.22 - Cross-Site Request Forgery

The Anti-Malware Security and Brute-Force Firewall plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.15.22. This makes it possible for unauthenticated attackers to consume resource utilization (by performing a large number of scans simultaneously), via forged request granted they can trick a site administrator into performing an action such as clicking on a link.