Vulnerabilities > CVE-2022-3538 - Missing Authorization vulnerability in Webmaster Tools Verification Project Webmaster Tools Verification
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |