high8.6
CVE-2024-6420
The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthen…
Impact
The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpplugins | Hide My Wp Ghost | before 5.2.02 |