I'm looking for to fix the issue below :
The following scenario show a successful CSRF attack resulting in the creation of a new user on wordpress:
The attacker sends malicious html page to an application user using social engineering techniques.
User executes the html page and the code embedded in the page instructs the user s browser to generate a new user creation request.
- The attacker successfully creates a new application user.
This is the begin for the source code of the form to create user :