The Legal Pages plugin for WordPress has a security issue called Cross-Site Request Forgery. This can happen in versions 1.4.2 and below. The problem is that the plugin does not properly check for a security code when someone tries to uninstall it. This means that someone who is not logged in can trick the site administrator into doing something, like clicking on a link, and then they can submit a fake request to uninstall the plugin.