← Database

CVE-2024-6289

MEDIUM CVSS: 6.1 Published: 2024-07-15 Modified: 2026-06-17

Description

The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.

Affected Platforms

Wpserveur Wps Hide Login

Weakness Type

CWE-601

References