CVE-2022-3538

The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins...

Cross site request forgery (csrf)

The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins...

PT-2022-22782 · WordPress · Webmaster Tools Verification

Name of the Vulnerable Software and Affected Versions: Webmaster Tools Verification WordPress plugin versions through 1.2 Description: The issue concerns a lack of authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins. Recommendations: F...

CVE-2022-3538 Webmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin Deactivation

The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins...

WordPress plugin Webmaster Tools Verification 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2022-3538

CVE-2022-3538 affects the Webmaster Tools Verification WordPress plugin (versions through 1.2). The root cause is missing authorization and CSRF protections when disabling plugins, permitting unauthenticated users to disable arbitrary plugins. Documented impact: unauthenticated deactivation of pl...

CVE-2022-3538: Missing Authorization

The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins...

Webmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin Deactivation

The plugin does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins PoC curl -X POST --data "wmtvuninstall=1uninstallconfirm=1=akismet/akismet.php" https://example.com...