Sicking

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a different web site.