Unauthenticated Users Can Disable Arbitrary Plugins in Webmaster Tools Verification WordPress Plugin

CVE-2022-3538 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins

Learn more about our Wordpress Pen Testing.