Remove anyone's pic gravtar

How it was found

Hi,

There is no csrf token while removing image

Attacker can Delete Victim's Gravtar Image Just by sending Link

Poc: https://en.gravatar.com/emails/remove-userimage/you_email_image_id here

Thanks :)