Filters apply as you choose them.
WordPress plugin wp-cleanfix has Remote Code Execution
WordPress WP Cleanfix Plugin 2.4.4 has CSRF