The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling plugins, allowing unauthenticated users to disable arbitrary plugins
Products Affected
| Vendor | Product | Version |
|---|---|---|
| webmaster_tools_verification_project | webmaster_tools_verification | * |