Lucene search

K
nvd[email protected]NVD:CVE-2024-3756
HistoryMay 06, 2024 - 6:15 a.m.

CVE-2024-3756

2024-05-0606:15:07
web.nvd.nist.gov
mf gig calendar
csrf
wordpress
contributors
security vulnerability

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and above delete arbitrary events via a CSRF attack

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%