WordPress Plugin Vulnerabilities

WPS Hide Login < 1.5.5 - Secret Login Page Disclosure

Description

fixed a vulnerability in version 1.5.4.2 and below that could allow an attacker to find and access the secret login page.

Affects Plugins

Plugin icon
wps-hide-login
Fixed in 1.5.5

References

CVE
CVE-2020-36710
URL
https://blog.nintechnet.com/wordpress-wps-hide-login-fixed-security-issue/

Miscellaneous

Original Researcher
Jerome Bruandet (nintechnet.com)
Verified
No
WPVDB ID
2f0c093c-38cc-450d-bac4-0f026c7a9a0f

Timeline

Publicly Published
2020-01-27 (about 6 years ago)
Added
2020-01-27 (about 6 years ago)
Last Updated
2023-06-08 (about 2 years ago)

Other

Published
Title
Published
2015-03-08
Title
Download Monitor < 1.6.4 - Authenticated Directory Listing
Published
2019-03-21
Title
Social Warfare <= 3.5.2 - Unauthenticated Arbitrary Settings Update
Published
2024-06-14
Title
WooCommerce - Social Login < 2.6.3 - Email Verification due to Insufficient Randomness
Published
2015-02-22
Title
WP Ultimate CSV Importer <= 3.6.74 - Database Table Export
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS