CVE-2024-6857

The WP MultiTasking WordPress plugin, affecting versions 0.1.12 and earlier , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating the Header, Footer, and Body Script Settings . A successful attack could allow an adversary to trick a l...