← Database

CVE-2024-6420

HIGH CVSS: 8.6 Published: 2024-07-23 Modified: 2026-06-17

Description

The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.

Affected Platforms

Wpplugins Hide My Wp Ghost

Weakness Type

NVD-CWE-noinfo

References