Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-99775
HistoryDec 09, 2021 - 12:00 a.m.

WordPress WPS Hide Login plugin authorization issue vulnerability

2021-12-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.041 Low

EPSS

Percentile

92.2%

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress WPS Hide Login plugin has an authorization issue vulnerability in versions prior to 1.9.1, which stems from the lack of authentication measures or insufficient authentication strength in the plugin. An unauthenticated attacker requests wp-admin options.php to obtain a secret login page.