Cross site request forgery (csrf)

The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value...

CVE-2015-9498

CVE-2015-9498 affects the WordPress plugin wps-hide-login (versions prior to 1.1). The vulnerability is a CSRF flaw that allows exploitation during the process of saving an option value. Impact is described as CSRF with the ability to trigger unintended state changes for authenticated users; no e...

Memory Corruption Vulnerability in WPS Image Processing ico

WPS Photo software is a practical tool from the official hand of WPS to see the picture, WPS Photo software is powerful, to help users browse a variety of image formats, the software is simple to operate, you can easily open a variety of types of pictures. WPS image processing ico memory corrupti...

WordPress WPS Hide Login Plugin < 1.5.3 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113495";...

WordPress wps-hide-login plugin security bypass vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin used in it. A security vulnerability exists in WordPress wps-hide-login plugin versio...

WordPress wps-hide-login plugin security bypass vulnerability (CNVD-2019-30732)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin that is used in it. A security vulnerability exists in WordPress wps-hide-login plugi...

WordPress wps-hide-login plugin security bypass vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin used in it. A security vulnerability exists in WordPress wps-hide-login plugin versio...

WordPress wps-hide-login plugin security bypass vulnerability (CNVD-2019-30733)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin used in it. A security vulnerability exists in WordPress wps-hide-login plugin versio...

WordPress wps-child-theme-generator plugin path traversal vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-child-theme-generator is a website theme generator plugin used in it. A path traversal vulnerability exists in versions...

CVE-2019-15826

The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...

CVE-2019-15826

The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...

CVE-2019-15823

The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...

CVE-2019-15823

The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...

CVE-2019-15825

The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...

Design/Logic Flaw

The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...

Design/Logic Flaw

The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...

Authentication flaw

The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...

CVE-2019-15826

The CVE concerns the WordPress plugin wps-hide-login prior to 1.5.3, which exposes a protection bypass through the Referer header in wp-login.php. Affected component: the wps-hide-login plugin for WordPress (version

CVE-2019-15825

The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...

CVE-2019-15825

The CVE-2019-15825 issue affects the WordPress plugin wps-hide-login before 1.5.3, where an action=rp&key&login protection bypass enables an unauthenticated attacker to bypass login protections. This has been assessed with CVSS: high/critical impact (C:H, I:H, A:H; network/vector: NONE/low comple...