CVE-2024-6855: WP MultiTasking <= 0.1.12 - Exit Popup Update via CSRF
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could allow attackers to make logged admins perform such action via a CSRF attack
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6855?
CVE-2024-6855 has been rated with a severity that indicates significant risk due to the potential for unauthorized actions through CSRF attacks.
How do I fix CVE-2024-6855?
To fix CVE-2024-6855, update the WP MultiTasking plugin to a version that includes CSRF validation for exit popup updates.
Who is affected by CVE-2024-6855?
CVE-2024-6855 affects users of the WP MultiTasking plugin for WordPress up to and including version 0.1.12.
What type of attack does CVE-2024-6855 enable?
CVE-2024-6855 enables Cross-Site Request Forgery (CSRF) attacks that could force actions on behalf of logged-in administrators.
Is CVE-2024-6855 a plugin-specific issue?
Yes, CVE-2024-6855 is a vulnerability specific to the WP MultiTasking WordPress plugin.