cve/2024/CVE-2024-6860.md

### [CVE-2024-6860](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6860)
![](https://img.shields.io/static/v1?label=Product&message=WP%20MultiTasking&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)&color=brightgreen)

### Description

The WP MultiTasking  WordPress plugin through 0.1.12 does not have CSRF check when updating its permalink suffix settings, which could allow attackers to make logged admins perform such action via a CSRF attack

### POC

#### Reference
- https://wpscan.com/vulnerability/1d09d3dd-aa49-4ff1-80e7-6d176e378916/

#### Github
No PoCs found on GitHub currently.