← Database

CVE-2022-3538

MEDIUM CVSS: 6.5 Published: 2022-11-14 Modified: 2026-06-17

Description

The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins

Affected Platforms

Webmaster Tools Verification Project Webmaster Tools Verification

Weakness Type

CWE-352, CWE-862, CWE-352, CWE-862

References