Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-3489

WP Hide <= 0.0.2 - Unauthenticated Settings Update

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Wp-Hide

  • 0.0.2 to ≤ 0.0.2affected

References