wpserveur wps hide login vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

The wps-hide-login plugin prior to 1.1 for WordPress has CSRF that affects saving an option value.

Wpserveur Wps Hide Login

5

CVSSv2

The WPS Hide Login WordPress plugin prior to 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user.

Wpserveur Wps Hide Login

2 Github repositories

NA

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated malicious users to brute force credentials on sites in versions up to, and including, 1.5.4.2.

Wpserveur Wps Hide Login

7.5

CVSSv2

The wps-hide-login plugin prior to 1.5.3 for WordPress has an action=confirmaction protection bypass.

Wpserveur Wps Hide Login

7.5

CVSSv2

The wps-hide-login plugin prior to 1.5.3 for WordPress has an adminhash protection bypass.

Wpserveur Wps Hide Login

7.5

CVSSv2

The wps-hide-login plugin prior to 1.5.3 for WordPress has an action=rp&key&login protection bypass.

Wpserveur Wps Hide Login

7.5

CVSSv2

The wps-hide-login plugin prior to 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field.

Wpserveur Wps Hide Login

5

CVSSv2

WPS Hide Login 1.6.1 allows remote malicious users to bypass a protection mechanism via post_password.

Wpserveur Wps Hide Login 1.6.1

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook