CVE-2024-6857

The WP MultiTasking WordPress plugin, affecting versions 0.1.12 and earlier , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating the plugin's Header, Footer, and Body Script Settings . This flaw could allow an attacker to trick a log...