Fileviewer Plugin up to 2.2 on WordPress cross-site request forgery