medium5.3
CVE-2026-84168
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard …
Impact
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page, defeating the Easy Hide Login WordPress plugin before 1.7's core protection.
Affected products
| Product | Affected versions |
|---|---|
| Easy Hide Login WordPress Plugin | before 1.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.