6.5 Medium

CVE-2022-3538 The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling…

Description

The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins

Affected products and versions

Product	Affected versions	Fixed in
Webmaster Tools Verification	1.2	No fix stated

Do you use Webmaster Tools Verification?

Track this CVE Watch Webmaster Tools Verification Check my SBOMs

www.cveye.io/en/cve/CVE-2022-3538

Timeline

Published November 14, 2022
Last modified April 30, 2025

References

wpscan.com wpscan.com

Track this CVE