Description
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could allow attackers to make logged admins perform such action via a CSRF attack
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP MultiTasking | ≤ 0.1.12 | — |
References
- https://wpscan.com/vulnerability/1124b07a-6274-49df-be77-615fda8f3a38/ exploit vdb-entry technical-description