VYPR
Unrated severityNVD Advisory· Published Sep 8, 2024· Updated Sep 9, 2024

WP MultiTasking <= 0.1.12 - Exit Popup Update via CSRF

CVE-2024-6855

Description

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could allow attackers to make logged admins perform such action via a CSRF attack

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.