Filters apply as you choose them.
The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF.
The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS.