CVE-2020-13426: Bdtask Multi-Scheduler

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability in the forms it presents, allowing the possibility of deleting records (users) when an ID is known.

Affected products

• Bdtask Multi-Scheduler: version 1.0.0 only

Published 2020-06-22. Last modified 2026-06-17.