title: Webmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin Deactivation
description: The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins
problem types: CWE-862 Missing Authorization
affected:
{
vendor: Unknown
product: Webmaster Tools Verification
versions:
version: 1.2, status: affected, lessThanOrEqual: 1.2, versionType: custom
}