← CVE Intelligence

CVE-2024-3756

MF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRF PUBLISHED

Description (CNA)

The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and above delete arbitrary events via a CSRF attack

Affected (CNA)

Vendor / productVersions
Unknown / MF Gig Calendaraffected 0 through 1.2.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.