CVE-2024-3756

The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and above delete arbitrary events via a CSRF attack...

CVE-2024-3756 MF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRF

The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and above delete arbitrary events via a CSRF attack...

CVE-2024-3756

The MF Gig Calendar WordPress plugin, versions 1.2.1 and earlier , is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks in certain areas. An attacker could leverage this to force authenticated users with Contributor privileges or higher to delete arbitrary even...