CVE-2024-6853

Name of the Vulnerable Software and Affected Versions WP MultiTasking WordPress plugin versions 0.1.12 and earlier

Description The issue is related to a lack of CSRF check when updating welcome popups, which could allow attackers to make logged admins perform such actions via a CSRF attack.

Recommendations For WP MultiTasking WordPress plugin versions 0.1.12 and earlier, update to a version that includes a CSRF check for welcome popup updates. As a temporary workaround, consider restricting access to the welcome popup update functionality to minimize the risk of exploitation.