Showing 1 vulnerability on this page for hide_my_wp_ghost

Signals CISA KEV Ransomware Nuclei
wpplugins vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure

The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.

CWE-203Jul 23, 20241 related artifact
CVSS8.6v3.1EPSS1.8%PoCs0SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei templateSTIX