CVE-2022-3538

CVE-2022-3538 affects the Webmaster Tools Verification WordPress plugin (versions through 1.2). The root cause is missing authorization and CSRF protections when disabling plugins, permitting unauthenticated users to disable arbitrary plugins. Documented impact: unauthenticated deactivation of pl...