Vulnerabilities > Wpserveur > WPS Hide Login > 1.9.16.2

DATE CVE VULNERABILITY TITLE RISK
2024-07-15 CVE-2024-6289 Open Redirect vulnerability in Wpserveur WPS Hide Login
The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
network
low complexity
wpserveur CWE-601
6.1