WordPress Plugin Access Control Error Vulnerability (CNVD-2022-01698)

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. WordPress Hide My WP plugin has an access control error vulnerability that stems from the fact that the Hide My WP plugin (version = 6.2.3) can be disabled by any unauthenticated user to disable it. It is possible to retrieve a reset token that can then be used to disable the plugin. No details of the vulnerability are currently available.