EIP-2026-113503

This is a functional CSRF exploit for WordPress 3.4.2, leveraging an auto-submitting form to manipulate the 'dashboard_incoming_links' widget settings. The attack abuses the lack of CSRF token validation to force a logged-in admin to submit a malicious RSS feed URL.