Vulnerabilities > CVE-2023-5089 - Unspecified vulnerability in Wpmudev Defender Security

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
wpmudev
NVD
Published: 2023-10-16
Updated: 2024-11-21

Summary

The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.

Vulnerable Configurations

Part Description Count
Application
Wpmudev
7

References