title: Protect WP Admin < 3.6.2 - Unauthenticated Plugin Deactivation
description: The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin (and therefore the protection offered) via a crafted request
problem types: CWE-862 Missing Authorization
affected:
{
product: Protect WP Admin
vendor: Unknown
versions:
lessThan: 3.6.2, status: affected, version: 3.6.2, versionType: custom
}