Lucene search
WpvulndbWPVDB-ID:D3AEB1E3-789A-4D3F-AE8E-B277CBC06056HistoryNov 28, 2022 - 12:00 a.m.
WP Shamsi < 4.1.1 - Unauthenticated Arbitrary Plugin Deactivation
2022-11-2800:00:00
wpscan.com
12
wordpress
shamsi
vulnerability
unauthenticated
plugin deactivation
EPSS
0.001
Percentile
26.1%
The plugin does not have authorisation check when activating plugins via an action hooked to init(), which could allow unauthenticated attackers to deactivate arbitrary plugins from the blog
Related
cvelist
cvelist
CVE-2022-4555
2022-12-16 13:54:19
cve
cve
CVE-2022-4555
2022-12-16 14:15:09
prion
prion
Authorization
2022-12-16 14:15:00
nvd
nvd
CVE-2022-4555
2022-12-16 14:15:09