Skip to content
Noroxi

WPS Hide Login

wps-hide-login · plugin

Known security vulnerabilities for WPS Hide Login. Find out in seconds which version runs on your site with WP Lens.

7 known vulnerabilities

4 critical · 2 with public exploit code · latest Jun 10, 2024

Vulnerabilities

  • CVE-2019-15826

    The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field.

    Critical 9.8

  • CVE-2019-15825

    The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass.

    Critical 9.8

  • CVE-2019-15824

    The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass.

    Critical 9.8

  • CVE-2019-15823

    The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass.

    Critical 9.8

  • CVE-2015-9498

    The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value.

    High 8.8

  • CVE-2024-2473

    WPS Hide Login <= 1.9.15.2 - Login Page Disclosure

    Medium 5.3

  • CVE-2023-49748

    WordPress WPS Hide Login plugin <= 1.9.11 - Secret Login Page Location Disclosure on Multisites vulnerability

    Low 3.7

← Back to directory