Skip to content
Sign in
8.6 High

CVE-2024-6420 The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect…

Description

The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.

Affected products and versions

Product Affected versions Fixed in
Hide My WP Ghost 5.2 earliest → < 5.2.02 5.2.02
hide_my_wp_ghost 5.2 earliest → < 5.2.02 5.2.02

Other CVEs of Hide My WP Ghost

The 3 CVEs of Hide My WP Ghost →
CVE-2026-86800 The Hide My WP Ghost WordPress plugin before 7.0.11 does not properly validate a loopback security-check request… 5.3 Medium CVE-2026-86796 The Hide My WP Ghost WordPress plugin before 7.0.11 does not verify that a request is a genuine WooCommerce request… 5.3 Medium
Track this CVE