Vulnerability CVE-2024-3756


Published: 2024-05-06

Description:
The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and above delete arbitrary events via a CSRF attack

 References:
https://wpscan.com/vulnerability/b28d0dca-2df1-4925-be81-dd9c46859c38/

Copyright 2026, cxsecurity.com

 

Back to Top