CVE-2021-36917 — WordPress Hide My WP premium plugin <= 6.2.3 - Unauthenticated Plugin Deactivation vulnerability
WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrieve a reset token which can then be used to deactivate the…
Published: 2021-11-24 · CVSS: 6.5 · CVSS 3.1
WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrieve a reset token which can then be used to deactivate the plugin.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7