CVE-2024-6289
15.07.2024, 06:15
The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
| Vendor | Product | Version |
|---|---|---|
| wpserveur | wps_hide_login | 𝑥 < 1.9.16.4 |
| wpserveur | wps_hide_login | 𝑥 < 1.9.16.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration