CVE-2020-13426

CVE-2020-13426 affects WordPress with the Multi Scheduler plugin v1.0.0. The vulnerability is a Cross‑Site Request Forgery in the plugin’s forms, allowing an attacker to delete records (users) when a target ID is known. The root cause is CSRF protection failure in the plugin’s request handling. P...