VULNERABILITY INTELLIGENCE

CVE-2022-2350

CVSS score5.3 MEDIUM
EPSS probability0.50%
CISA KEVNot currently listed
Published2022-10-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

The Disable User Login WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating its settings, allowing unauthenticated attackers to block (or unblock) users at will.

Weakness classification

  • contact@wpscan.com: CWE-352
  • nvd@nist.gov: CWE-352

Primary references