CVE-2022-3538

Webmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin Deactivation

CVSS 6.5 MEDIUMEPSS 0.3%CWE-352 CWE-862

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

14 nov 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Productos afectados

Unknown · Webmaster Tools Verification

Referencias

https://wpscan.com/vulnerability/337ee7ed-9ade-4567-b976-88386cbcf036