Description (CNA)
The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin (and therefore the protection offered) via a crafted request
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Protect WP Admin | affected 3.6.2 before 3.6.2 |
CWE
CWE-862
References
ADP enrichment
No English description supplied.