5.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.6%
The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request
wpscan.com/vulnerability/36d78b6c-0da5-44f8-b7b3-eae78edac505