CVE · Critical

CVE-2022-4693 — User Verification by PickPlugins [user-verification] < 1.0.94

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-4693 User Verification by PickPlugins [user-verification] < 1.0.94 Improper Authentication Critical 9.8 < 1.0.94 1.0.94 2022-12-28

CVE-2022-4693

The User Verification plugin by PickPlugins versions prior to 1.0.94 contain a bypass vulnerability that could allow an attacker to circumvent authorization checks and potentially access the WordPress admin panel. The flaw, discovered by Lana Codes, stems from insufficient restriction enforcement in the code logic. Users should upgrade to version 1.0.94 or later to remediate this issue.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.