Hide login page <= 1.1.7 - Login Page Disclosure
mediumThe Hide login page plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 1.1.7. This is due to the plugin disclosing the login path on multi-site instances. This makes it possible for unauthenticated attackers to discover the login page path and bypass the intended fun...
- CVSS:
- 5.3
- Affected:
- up to 1.1.7
- Fix:
- No patched version reported
- Disclosed:
- Nov 23, 2023