CVE-2022-3538 — Webmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin Deactivation

CVE-2022-3538

Webmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin Deactivation PUBLISHED

Description (CNA)

The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins

Affected (CNA)

Vendor / product	Versions
Unknown / Webmaster Tools Verification	affected 1.2 through 1.2

CWE

CWE-862, CWE-352

References

https://wpscan.com/vulnerability/337ee7ed-9ade-4567-b976-88386cbcf036

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/337ee7ed-9ade-4567-b976-88386cbcf036

CISA-ADP

No English description supplied.

No references supplied.