Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: Wpserveur Component: Wps Hide Login Clear all filters
TI-2024-05836 CVE-2024-6289 · GHSA-87fp-vpx2-6v83

WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure

Priority MEDIUM 60

The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00904 Published 2024-07-15 Fixed in 1.9.16.4 CWE-601
TI-2024-02299 CVE-2024-2473 · GHSA-cwvf-77f4-2gc5

WPS Hide Login <= 1.9.15.2 - Login Page Disclosure

Priority LOW 27

The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01235 Published 2024-06-11 No fix listed CWE-863
TI-2020-18881 CVE-2020-36710 · GHSA-qhhh-gxxv-pg3h

WPS Hide Login <= 1.5.4.2 - Hidden Login Page Location Disclosure

Priority MEDIUM 40

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentia…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00777 Published 2023-06-07 No fix listed CWE-863
TI-2021-07197 CVE-2021-24917 · GHSA-4qm3-4v98-g42c

WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header

Priority HIGH 71

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.72179 Published 2021-12-06 Fixed in 1.9.1 CWE-863