Vulnerabilities > CVE-2019-15826 - Unspecified vulnerability in Wpserveur WPS Hide Login
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field.
Vulnerable Configurations
References
- https://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/
- https://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/
- https://wordpress.org/plugins/wps-hide-login/#developers
- https://wordpress.org/plugins/wps-hide-login/#developers
- https://wpvulndb.com/vulnerabilities/9469
- https://wpvulndb.com/vulnerabilities/9469