TI-2022-03220 CVE-2022-3489 · GHSA-f4x4-cpmc-ghq4WP Hide <= 0.0.2 - Unauthenticated Settings UpdatePriority MEDIUM 63The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted requestCVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00425 · Published 2022-11-07 · No fix listed CWE-352
