Search vulnerabilities

Results 1

Export CSV
CVE-2022-3538

Webmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin Deactivation

The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed