critical9.8
CVE-2019-15826
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field.
Impact
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpserveur | Wps Hide Login | before 1.5.3 |
References
- NVD record
- CVE.org record
- https://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/
- https://wordpress.org/plugins/wps-hide-login/#developers
- https://wpvulndb.com/vulnerabilities/9469
- https://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/
- https://wordpress.org/plugins/wps-hide-login/#developers
- https://wpvulndb.com/vulnerabilities/9469