Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wps Hide Login MEDIUM 6.1
CVE-2024-6289

The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing a…

Fix: 1.9.16.4+
Fix from $1,600 2024-07-15
Wps Hide Login MEDIUM 5.3
CVE-2024-2473

The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due to a bypas…

Fix: 1.9.16+
Fix from $1,600 2024-06-11
Wps Hide Login HIGH 7.5
CVE-2020-36710

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page ma…

Fix: after 1.5.4.2
Fix from $1,950 2023-06-07
Wps Hide Login HIGH 7.5
CVE-2021-24917EPSS 72%

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a …

Fix: 1.9.1+
Fix from $1,950 2021-12-06
Wps Hide Login MEDIUM 5.3
CVE-2021-3332

WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via post_password.

No fix yet
Fix from $1,600 2021-03-01
Wps Hide Login HIGH 8.8
CVE-2015-9498

The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value.

Fix: 1.1+
Fix from $1,950 2019-10-22
Wps Hide Login CRITICAL 9.8
CVE-2019-15826

The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field.

Fix: 1.5.3+
Fix from $2,300 2019-08-30
Wps Child Theme Generator CRITICAL 9.8
CVE-2019-15822

The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal.

Fix: 1.2+
Fix from $2,300 2019-08-30
Wps Hide Login CRITICAL 9.8
CVE-2019-15823EPSS 9%

The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass.

Fix: 1.5.3+
Fix from $2,300 2019-08-30
Wps Hide Login CRITICAL 9.8
CVE-2019-15824

The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass.

Fix: 1.5.3+
Fix from $2,300 2019-08-30
Wps Hide Login CRITICAL 9.8
CVE-2019-15825

The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass.

Fix: 1.5.3+
Fix from $2,300 2019-08-30