Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2024-6289

WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WPS Hide Login

Default version status: unaffected

  • 0 to < 1.9.16.4affected

References