WP MultiTasking WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WP MultiTasking WordPress plugin, affecting versions through 0.1.12. The vulnerability arises because the plugin does not implement CSRF checks when users update the Header, Footer, and Body Script Settings. This lack of validation could enable attackers to exploit logged-in administrators by forcing them to make unintended changes via a CSRF attack.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in the Header, Footer, and Body Script Settings by manipulating logged-in admin users.