783 matches found
CVE-2023-5940
CVE-2023-5940 affects the WP Not Login Hide (WPNLH) WordPress plugin up to version 1.0. The issue is stored XSS in the plugin settings: an admin (high privilege) could inject payloads via the WPNLH Settings warning message field, potentially triggering stored XSS for authenticated users (includin...
WordPress Hide login page Plugin <= 1.1.9 is vulnerable to Bypass Vulnerability
Software Hide login page Type Plugin Vulnerable versions = 1.1.9 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2023-48335 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID b14b2f707de8 Credits Naveen Muthusamy Required privilege...
LWS Hide Login < 2.1.9 - Protection Mechanism Bypass
Description The LWS Hide Login plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 2.1.8. This is due to the fact that attackers can bypass the hidden login page by visiting install.php. This makes it possible for unauthenticated attackers to...
CVE-2023-31075
Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...
CVE-2023-31075
Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...
CVE-2023-31075
CVE-2023-31075 is a CSRF vulnerability in WordPress plugin Easy Hide Login (
CVE-2023-31075 WordPress Easy Hide Login Plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...
WordPress Plugin Easy Hide Login Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
WordPress LWS Hide Login Plugin <= 2.1.8 is vulnerable to Bypass Vulnerability
Software LWS Hide Login Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.1.9 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2023-47818 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 6d52db64950c Credits Naveen Muthusamy Required privilege...
CVE-2023-34378
Cross-Site Request Forgery CSRF vulnerability in scriptburn.Com WP Hide Post plugin = 2.0.10 versions...
CVE-2023-34378
Cross-Site Request Forgery CSRF vulnerability in scriptburn.Com WP Hide Post plugin = 2.0.10 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in scriptburn.Com WP Hide Post plugin = 2.0.10 versions...
CVE-2023-34378
CVE-2023-34378 (WP Hide Post) is a CSRF vulnerability in the WordPress plugin WP Hide Post (affected:
CVE-2023-34378 WordPress WP Hide Post Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in scriptburn.Com WP Hide Post plugin = 2.0.10 versions...
WordPress Plugin wp-hide-post Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2023-24850 · WordPress · Wp Hide Post
Name of the Vulnerable Software and Affected Versions: WP Hide Post plugin versions = 2.0.10 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application...
CVE-2023-34025
A vulnerability in Aurélien LWS LWS Hide Login lws-hide-login.This issue affects LWS Hide Login: from n/a through = 2.1.6...
CVE-2023-34025
Cross-Site Request Forgery CSRF vulnerability in LWS LWS Hide Login plugin = 2.1.6 versions...