WP Shamsi < 4.1.1 - Unauthenticated Arbitrary Plugin Deactivation

2022-11-2800:00:00

wpscan.com

wordpress

shamsi

vulnerability

unauthenticated

plugin deactivation

0.001 Low

EPSS

Percentile

26.3%

JSON

The plugin does not have authorisation check when activating plugins via an action hooked to init(), which could allow unauthenticated attackers to deactivate arbitrary plugins from the blog

CPENameOperatorVersion
wp-shamsilt4.1.1

CPE	Name	Operator	Version
	wp-shamsi	lt	4.1.1

0.001 Low

EPSS

Percentile

26.3%

JSON

Related for WPVDB-ID:D3AEB1E3-789A-4D3F-AE8E-B277CBC06056