CVE-2023-5089

Name of the Vulnerable Software and Affected Versions Defender Security WordPress plugin versions prior to 4.1.0

Description The issue allows an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled, due to the plugin not preventing redirects to the login page via the auth redirect WordPress function.

Recommendations For versions prior to 4.1.0, update to version 4.1.0 or later to resolve the issue. As a temporary workaround, consider disabling the hide login page functionality until a patch is available. Restrict access to the login page to minimize the risk of exploitation.