CVE-2022-3538

Webmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin Deactivation

CVSS 6.5 MEDIUMEPSS 0.3%CWE-352 CWE-862

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

14 nov 2022Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Produtos afetados

Unknown · Webmaster Tools Verification

Referências

https://wpscan.com/vulnerability/337ee7ed-9ade-4567-b976-88386cbcf036