PT-2024-37516 · WordPress · Wps Hide Login
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
WPS Hide Login WordPress plugin versions prior to 1.9.16.4
Description:
The issue allows an unauthenticated visitor to access the hidden login page due to the plugin not preventing redirects to the login page via the
auth redirect WordPress function.Recommendations:
For versions prior to 1.9.16.4, update to version 1.9.16.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the login page to minimize the risk of exploitation.
Exploit
Fix
Open Redirect
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wps Hide Login