The Webmaster Tools Verification WordPress plugin up to and including 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
webmaster tools verification project webmaster tools verification |