WordPress Plugin Vulnerabilities

WPS Hide Login < 1.5.3 - Multiples Issues

Description

Protection Bypasses

Affects Plugins

Plugin icon
wps-hide-login
Fixed in 1.5.3

References

CVE
CVE-2019-15823
CVE
CVE-2019-15824
CVE
CVE-2019-15825
CVE
CVE-2019-15826
URL
https://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/

Miscellaneous

Original Researcher
Julio Potier
Verified
No
WPVDB ID
8aecc4f1-612f-4cda-92fb-5e997504c9de

Timeline

Publicly Published
2019-07-23 (about 6 years ago)
Added
2019-07-23 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2016-07-26
Title
WooCommerce Stock Manager < 1.0.9 - CSRF and Lack of Authorisation
Published
2016-07-25
Title
Total Security < 3.4.1 - XSS & Settings Change
Published
2014-08-01
Title
Slash WP - FPD, XSS & CS vulnerabilities
Published
2015-08-10
Title
Events Manager < 5.6 - Cross-Site Scripting (XSS) & Code Injection
Published
2014-08-01
Title
WordPress 3.3.1 - Multiple Vulnerabilities including XSS & Privilege Escalation