CVE-2024-6860

The WP MultiTasking WordPress plugin (versions 0.1.12 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating the plugin's permalink suffix settings . An attacker could trick a logged-in administrator into performing these a...