CVE-2024-6857

Name of the Vulnerable Software and Affected Versions: WP MultiTasking WordPress plugin versions 0.1.12 and earlier

Description: The issue concerns a lack of CSRF check when updating Header, Footer, and Body Script Settings. This could allow attackers to make logged-in admins perform such actions via a CSRF attack.

Recommendations: For WP MultiTasking WordPress plugin versions 0.1.12 and earlier, consider disabling the update functionality for Header, Footer, and Body Script Settings until a patch is available. Restrict access to these settings to minimize the risk of exploitation. Avoid using the plugin's settings update feature until the issue is resolved.