Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9cjm-fv5h-54p6

Опубликовано: 09 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its Header, Footer and Body Script Settings, which could allow attackers to make logged admins perform such action via a CSRF attack

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its Header, Footer and Body Script Settings, which could allow attackers to make logged admins perform such action via a CSRF attack

EPSS

Процентиль: 26%
0.00089
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
10 месяцев назад

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its Header, Footer and Body Script Settings, which could allow attackers to make logged admins perform such action via a CSRF attack

EPSS

Процентиль: 26%
0.00089
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352