WordPress plugin
WP MultiTasking – WP Utilities security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium8
- Low0
All WP MultiTasking – WP Utilities vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery to Permalink Suffix Update ≤0.1.12No patch available | CVE-2024-6860 | |
| Medium4.3 | Cross-Site Request Forgery to Header/Footer/Body Script Update ≤0.1.12No patch available | CVE-2024-6857 | |
| Medium4.4 | WP Utilities <= 0.1.17 - Authenticated (Administrator+) Stored Cross-Site Scripting ≤0.1.17Update to 0.1.18 | CVE-2024-8189 | |
| Medium4.3 | Cross-Site Request Forgery to Exit Popup Update ≤0.1.12No patch available | CVE-2024-6855 | |
| Medium4.3 | Cross-Site Request Forgery to SMTP Settings Update ≤0.1.12No patch available | CVE-2024-6856 | |
| Medium4.3 | Cross-Site Request Forgery to Welcome Popup Update ≤0.1.12No patch available | CVE-2024-6853 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤0.1.12No patch available | CVE-2024-6859 | |
| Medium4.3 | Cross-Site Request Forgery to Settings Update ≤0.1.12No patch available | CVE-2024-6852 |
- Medium4.3Cross-Site Request Forgery to Permalink Suffix Update
≤0.1.12No patch available
- Medium4.3Cross-Site Request Forgery to Header/Footer/Body Script Update
≤0.1.12No patch available
- Medium4.4WP Utilities <= 0.1.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
≤0.1.17Update to 0.1.18
- Medium4.3Cross-Site Request Forgery to Exit Popup Update
≤0.1.12No patch available
- Medium4.3Cross-Site Request Forgery to SMTP Settings Update
≤0.1.12No patch available
- Medium4.3Cross-Site Request Forgery to Welcome Popup Update
≤0.1.12No patch available
- Medium6.1Reflected Cross-Site Scripting
≤0.1.12No patch available
- Medium4.3Cross-Site Request Forgery to Settings Update
≤0.1.12No patch available
WP MultiTasking – WP Utilities: common questions
Does WP MultiTasking – WP Utilities have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in WP MultiTasking – WP Utilities: 8 medium. At least one is not fixed in the latest version.
How do I check which version of WP MultiTasking – WP Utilities I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP MultiTasking – WP Utilities vulnerability?
CVE-2024-6860, published Mar 19, 2025: WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Permalink Suffix Update. Severity: Medium (CVSS 4.3).
Is any WP MultiTasking – WP Utilities vulnerability listed in CISA KEV?
No. None of the known WP MultiTasking – WP Utilities vulnerabilities is currently listed in the CISA KEV catalog.