8.6
Élevée
CVE-2024-6420 The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect…
Description
The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Hide My WP Ghost 5.2 | premières → < 5.2.02 | 5.2.02 |
| hide_my_wp_ghost 5.2 | premières → < 5.2.02 | 5.2.02 |