High severity7.5NVD Advisory· Published May 6, 2024· Updated Jun 17, 2026

CVE-2024-3756

Description

The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and above delete arbitrary events via a CSRF attack

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/MF Gig Calendarllm-fuzzy
Range: <=1.2.1
osv-coords2 versions
pkg:bitnami/wordpress pkg:bitnami/wordpress-multisite
< 1.2.2+ 1 more
- (no CPE)range: < 1.2.2
- (no CPE)range: < 1.2.2
WordPress/Calendarcpe-rescue
Package: https://wordpress.org/plugins/calendar
Mf Gig Calendar Project/Mf Gig Calendar
cpe:2.3:a:mf_gig_calendar_project:mf_gig_calendar:*:*:*:*:*:wordpress:*:*
Range: <=1.2.1

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/b28d0dca-2df1-4925-be81-dd9c46859c38/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000