CVE-2026-84168

Name of the Vulnerable Software and Affected Versions Easy Hide Login WordPress plugin versions prior to 1.7

Description The plugin fails to fully enforce hidden-login protection. An unauthenticated attacker can access the standard login page by using specific password-reset request parameters. This allows the attacker to recover the site's configured secret login slug from the resulting page, bypassing the core protection mechanism and leading to sensitive information exposure of user or configuration data.

Recommendations Update the plugin to version 1.7 or later.