Wp Multitasking (Unknown) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-04-09. Vendor: Unknown.

CVEs of Wp Multitasking

• CVE-2024-6860 - CVSS 4.3 (medium), 2025-04-09: The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its permalink suffix settings, which could allow attackers to make…
• CVE-2024-6857 - CVSS 4.3 (medium), 2025-04-09: The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its Header, Footer and Body Script Settings, which could allow…
• CVE-2024-6856 - CVSS 6.5 (medium), 2024-09-08: The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged…
• CVE-2024-6855 - CVSS 6.5 (medium), 2024-09-08: The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could allow attackers to make logged admins…
• CVE-2024-6853 - CVSS 6.5 (medium), 2024-09-08: The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could allow attackers to make logged admins…
• CVE-2024-6859 - CVSS 5.4 (medium), 2024-09-08: The WP MultiTasking WordPress plugin through 0.1.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post…
• CVE-2024-6852 - CVSS 6.5 (medium), 2024-09-08: The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged…