CVE-2021-24917

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user...

CVE-2021-24917

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user...

CVE-2021-24917

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user...

Design/Logic Flaw

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user...

CVE-2021-24917 WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user...

CVE-2021-24917

Affected software/versions: WordPress WPS Hide Login plugin earlier than 1.9.1. Issue: Incorrect authorization allows unauthenticated users to discover the secret login page by crafting a request to /wp-admin/options.php with a random referer. This results in information disclosure (secret login ...

CVE-2021-24917: Incorrect Authorization

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user...

PT-2021-5742

Name of the Vulnerable Software and Affected Versions MediaTek microchips versions MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 Affected Software Versions 7.4.0.0 Description The issue is related to a buffer out-of-bounds write in the memory of MediaTek...

WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header

The plugin has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user. curl --referer "something" -sIXGET https://example.com/wp-admin/options.php HTTP/2 302 ... location:...

WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header

The plugin has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user. PoC curl --referer "something" -sIXGET https://example.com/wp-admin/options.php HTTP/2 302 ... location:...

WordPress WPS Hide Login plugin <= 1.9 - Protection Bypass with Referer-Header vulnerability

Protection Bypass with Referer-Header vulnerability discovered by Daniel Ruf in WordPress WPS Hide Login plugin versions = 1.9. Solution Update the WordPress WPS Hide Login plugin to the latest available version at least 1.9.1...

WordPress WPS Hide Login Login Page Revealer

This module exploits a bypass issue with WPS Hide Login version use auxiliary/scanner/http/wp/wpshideloginrevealer msf undefinedwpshideloginrevealer show actions ...actions... msf undefinedwpshideloginrevealer set ACTION msf undefinedwpshideloginrevealer show options ...show and set options... ms...

Binary Vulnerability in WPS Pictures of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2021-56429)

WPS Photo is a photo processing software. A binary vulnerability exists in WPS Picture of Zhuhai Kingsoft Office Software Limited, which can be exploited by attackers to cause a denial of service...

Kingsoft WPS Office for Android suffers from information leakage vulnerability

WPS Office is an office software. An information disclosure vulnerability exists in Kingsoft WPS Office for Android, which can be exploited by attackers to obtain sensitive information...

Binary vulnerability in WPS Office of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2021-49106)

WPS Office is the office software produced by Kingsoft Office Software, which can realize the text, forms, presentations and other functions commonly used in office software. A binary vulnerability exists in WPS Office by Kingsoft Office Software Zhuhai Limited, which can be exploited by attacker...

Binary Vulnerability in WPS Office of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2021-49105)

WPS Office is the office software produced by Kingsoft Office Software, which can realize the text, forms, presentations and other functions commonly used in office software. A binary vulnerability exists in WPS Office by Kingsoft Office Software Zhuhai Limited, which can be exploited by attacker...

Binary Vulnerability in WPS Office of Zhuhai Kingsoft Office Software Co.

WPS Office is the office software produced by Kingsoft Office Software, which can realize the text, forms, presentations and other functions commonly used in office software. A binary vulnerability exists in WPS Office by Kingsoft Office Software Zhuhai Limited, which can be exploited by attacker...

Denial of Service Vulnerability in WPS Images at Zhuhai Kingsoft Office Software Co.

WPS Pictures is a picture processor. A denial of service vulnerability exists in WPS Picture by Zhuhai Kingsoft Office Software Co. which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in WPS Images of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2021-46740)

WPS Pictures is a picture processor. A denial of service vulnerability exists in WPS Picture by Zhuhai Kingsoft Office Software Co. which can be exploited by attackers to cause a denial of service...

XSS Vulnerability in WPS Office of Zhuhai Kingsoft Office Software Co.

WPS Office is an office software. Zhuhai Kingsoft Office Software Co. Ltd WPS Office has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...