8 matches found
CVE-2024-6859
CVE-2024-6859 affects WP MultiTasking ≤ 0.1.12 (WP Utilities) and is described in Red Hat/NVD entries as a Stored XSS via shortcode attributes. The root cause is lack of validation/escaping of shortcode attributes before output, enabling users with the contributor role or higher to inject script ...
CVE-2024-6860
The WP MultiTasking WordPress plugin (versions 0.1.12 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating the plugin's permalink suffix settings . An attacker could trick a logged-in administrator into performing these a...
CVE-2024-6852
CVE-2024-6852 concerns the WordPress plugin WP MultiTasking (versions ≤ 0.1.12). The issue is a missing CSRF check when updating plugin settings, which could allow an attacker to force a logged-in admin to modify settings via CSRF. Public sources in connected documents confirm the root cause as l...
CVE-2024-6857
The WP MultiTasking WordPress plugin, affecting versions 0.1.12 and earlier , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating the Header, Footer, and Body Script Settings . A successful attack could allow an adversary to trick a l...
CVE-2024-6855
The CVE-2024-6855 issue affects the WP MultiTasking (WP Utilities) WordPress plugin, specifically versions
CVE-2024-6856
CVE-2024-6856 affects the WordPress plugin WP MultiTasking (versions up to 0.1.12). The root cause is a missing CSRF check when updating plugin settings, enabling a logged-in attacker to modify settings through a CSRF attack. Exploitation details are not provided beyond this description in the co...