Lucene search
HistoryJul 23, 2024 - 6:15 a.m.
CVE-2024-6420
wordpress
login page
authentication
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
EPSS
0
Percentile
9.4%
The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
Related
vulnrichment
vulnrichment
CVE-2024-6420 Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure
2024-07-23 06:00:03
cvelist
cvelist
CVE-2024-6420 Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure
2024-07-23 06:00:03
cve
cve
CVE-2024-6420
2024-07-23 06:15:11
wordfence
wordfence
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
EPSS
0
Percentile
9.4%
Related for NVD:CVE-2024-6420