Lucene search
WpvulndbWPEX-ID:4204682B-F657-42E1-941C-BEE7A245E9FDHistoryDec 23, 2021 - 12:00 a.m.
Protect WP Admin < 3.6.2 - Unauthenticated Plugin Deactivation
2021-12-2300:00:00
wpvulndb
65
0.001 Low
EPSS
Percentile
44.6%
The plugin does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin (and therefore the protection offered) via a crafted request
v < 3.6 - https:/example.com/wp-content/plugins/protect-wp-admin/lib/pwa-deactivate.php?disable_pwa=1
v < 3.6.2 - https:/example.com/?pwa_inactive=1&[email protected]Related
cnvd
cnvd
WordPress Protect WP Admin plugin access control error vulnerability
2022-01-26 00:00:00
wpvulndb
wpvulndb
Protect WP Admin < 3.6.2 - Unauthenticated Plugin Deactivation
2021-12-23 00:00:00
patchstack
patchstack
cve
cve
CVE-2021-24906
2022-01-24 08:15:08
cvelist
cvelist
nvd
nvd
CVE-2021-24906
2022-01-24 08:15:08
prion
prion
Cross site request forgery (csrf)
2022-01-24 08:15:00