medium6.1
CVE-2024-6289
The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthen…
Impact
The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpserveur | Wps Hide Login | before 1.9.16.4 |