Loading vulnerability details…
CVSS v3.1
6.5
EPSS
0.35%
Published
Nov 14, 2022
Modified
Apr 30, 2025
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NWeaknesses (CWE)
Affected Products (1)
References (2)