CVE-2020-13426: CSRF
Published Jun 22, 2020
·Updated
The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability in the forms it presents, allowing the possibility of deleting records (users) when an ID is known.
Affected Software
1 affected component
BDTASK Multi-scheduler Wordpress=1.0.0
Event History
Jun 22, 2020
CVE Published
via MITRE·05:09 PM
Data Sourced
via MITRE·05:09 PM
Description
Frequently Asked Questions
1
What is CVE-2020-13426?
CVE-2020-13426 is a Cross-Site Request Forgery (CSRF) vulnerability in the Multi-Scheduler plugin 1.0.0 for WordPress.
2
What is the severity of CVE-2020-13426?
The severity of CVE-2020-13426 is medium (6.5 out of 10).
3
How does CVE-2020-13426 affect WordPress?
CVE-2020-13426 affects WordPress through the Multi-Scheduler plugin 1.0.0.
4
How can I fix CVE-2020-13426?
To fix CVE-2020-13426, update the Multi-Scheduler plugin to a version that has fixed the CSRF vulnerability.
5
Are there any references related to CVE-2020-13426?
Yes, you can find more information about CVE-2020-13426 at the following references: [reference links here].