CVE-2020-13426 – multi Scheduler <= 1.0.0 - Cross-Site Request Forgery

https://notcve.org/view.php?id=CVE-2020-13426

21 May 2020 — The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability in the forms it presents, allowing the possibility of deleting records (users) when an ID is known. El plugin Multi-Scheduler 1.0.0 para WordPress, presenta una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en los formularios que presenta, lo que permite la posibilidad de eliminar registros (usuarios) cuando se conoce un ID • https://0day.today/exploit/34496 • CWE-352: Cross-Site Request Forgery (CSRF) •