Skip to content
Sign in
6.1 Medium

CVE-2024-6289 The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect…

Description

The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.

Affected products and versions

Product Affected versions Fixed in
WPS Hide Login 1.9 earliest → < 1.9.16.4 1.9.16.4
wps_hide_login 1.9 earliest → < 1.9.16.4 1.9.16.4

Other CVEs of WPS Hide Login

The 2 CVEs of WPS Hide Login →
CVE-2021-24917 The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random… Not rated
Track this CVE