Логотип exploitDog
bind:CVE-2024-6860
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-6860

Количество 2

Количество 2

nvd логотип

CVE-2024-6860

10 месяцев назад

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its permalink suffix settings, which could allow attackers to make logged admins perform such action via a CSRF attack

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-qgc3-2f6v-85jf

10 месяцев назад

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its permalink suffix settings, which could allow attackers to make logged admins perform such action via a CSRF attack

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-6860

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its permalink suffix settings, which could allow attackers to make logged admins perform such action via a CSRF attack

CVSS3: 4.3
0%
Низкий
10 месяцев назад
github логотип
GHSA-qgc3-2f6v-85jf

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its permalink suffix settings, which could allow attackers to make logged admins perform such action via a CSRF attack

CVSS3: 4.3
0%
Низкий
10 месяцев назад

Уязвимостей на страницу