Lucene search
GoogleOSV:BIT-WORDPRESS-2024-3756HistoryJul 18, 2024 - 7:41 a.m.
BIT-wordpress-2024-3756
2024-07-1807:41:57
Google
osv.dev
2
wordpress
csrf
mf gig calendar
security
attack
software
events
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and above delete arbitrary events via a CSRF attack
Related
cve
cve
CVE-2024-3756
2024-05-06 06:15:07
wpexploit
wpexploit
MF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRF
2024-04-15 00:00:00
wpvulndb
wpvulndb
MF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRF
2024-04-15 00:00:00
vulnrichment
vulnrichment
CVE-2024-3756 MF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRF
2024-05-06 06:00:02
cvelist
cvelist
CVE-2024-3756 MF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRF
2024-05-06 06:00:02
nvd
nvd
CVE-2024-3756
2024-05-06 06:15:07
osv
osv
BIT-wordpress-multisite-2024-3756
2024-07-18 07:40:35
wordfence
wordfence
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
Related for OSV:BIT-WORDPRESS-2024-3756