CVE-2024-6855

Name of the Vulnerable Software and Affected Versions WP MultiTasking WordPress plugin versions 0.1.12 and earlier

Description The issue is related to a lack of CSRF check when updating exit popups, which could allow attackers to make logged admins perform such actions via a CSRF attack. This could enable attackers to perform unauthorized actions.

Recommendations For WP MultiTasking WordPress plugin versions 0.1.12 and earlier, update to a version that includes a CSRF check for exit popup updates to prevent exploitation. As a temporary workaround, consider restricting access to the exit popup update functionality to minimize the risk of unauthorized actions.