CVE-2024-6289 — WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure
The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to…
Published: 2024-07-15 · CVSS: 6.1 · CVSS 3.1
The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7