GCVE - cpe:2.3:a:unknown:wp_multitasking:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wp_multitasking:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	Wp Multitasking (`b840e9c0-ee5d-57d7-9bd4-9d7857ebb96c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-6860`	vulnerable	2026-06-08 06:58:20.613965	WP MultiTasking <= 0.1.12 - Permalink Suffix Update via CSRF The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its permalink suffix settings, which could allow attackers to make logged admins perform such action via a CSRF attack Published: 2025-04-09T06:00:05.104Z Updated: 2025-04-09T19:11:40.133Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/1d09d3dd-aa49-4ff1-80e7-6d176e378916/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6859`	vulnerable	2026-06-08 06:58:20.613495	WP MultiTasking <= 0.1.12 - Reflected XSS via Shortcode The WP MultiTasking WordPress plugin through 0.1.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Published: 2024-09-08T06:00:02.961Z Updated: 2024-09-09T19:52:01.460Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/34ae6121-304f-495b-bcc1-4fbd3d70a9fb/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6857`	vulnerable	2026-06-08 06:58:20.605644	WP MultiTasking <= 0.1.12 - Header/Footer/Body Script Update via CSRF The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its Header, Footer and Body Script Settings, which could allow attackers to make logged admins perform such action via a CSRF attack Published: 2025-04-09T06:00:04.059Z Updated: 2025-04-09T19:17:05.474Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/97636602-2dd0-465b-b6dc-acb42147edb3/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6856`	vulnerable	2026-06-08 06:58:20.605271	WP MultiTasking <= 0.1.12 - SMTP Settings Update via CSRF The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Published: 2024-09-08T06:00:02.783Z Updated: 2024-09-09T19:50:34.925Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/9700845e-89ca-4f9b-95f0-4b46a975b662/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6855`	vulnerable	2026-06-08 06:58:20.604785	WP MultiTasking <= 0.1.12 - Exit Popup Update via CSRF The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could allow attackers to make logged admins perform such action via a CSRF attack Published: 2024-09-08T06:00:02.581Z Updated: 2024-09-09T19:49:28.870Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/1124b07a-6274-49df-be77-615fda8f3a38/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6853`	vulnerable	2026-06-08 06:58:20.603995	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6852`	vulnerable	2026-06-08 06:58:20.602830	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.