critical9.8
CVE-2019-15823
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass.
Impact
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpserveur | Wps Hide Login | before 1.5.3 |
References
- NVD record
- CVE.org record
- https://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/
- https://wordpress.org/plugins/wps-hide-login/#developers
- https://wpvulndb.com/vulnerabilities/9469
- https://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/
- https://wordpress.org/plugins/wps-hide-login/#developers
- https://wpvulndb.com/vulnerabilities/9469