Description
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could allow attackers to make logged admins perform such action via a CSRF attack
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP MultiTasking | ≤ 0.1.12 | — |
References
- https://wpscan.com/vulnerability/d1ce78c3-5d6c-465e-9ce8-6d92f7480333/ exploit vdb-entry technical-description