Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2020-36710

WPS Hide Login <= 1.5.4.2 - Hidden Login Page Location Disclosure

Description

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentials on sites in versions up to, and including, 1.5.4.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tabrisrp WPS Hide Login

Default version status: unaffected

  • 0 to ≤ 1.5.4.2affected

References