Design/Logic Flaw

The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...

Authentication flaw

The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...

Design/Logic Flaw

The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...

CVE-2019-15826

The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...

CVE-2019-15826

The CVE concerns the WordPress plugin wps-hide-login prior to 1.5.3, which exposes a protection bypass through the Referer header in wp-login.php. Affected component: the wps-hide-login plugin for WordPress (version

CVE-2019-15825

The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...

CVE-2019-15825

The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...

CVE-2019-15825

The CVE-2019-15825 issue affects the WordPress plugin wps-hide-login before 1.5.3, where an action=rp&key&login protection bypass enables an unauthenticated attacker to bypass login protections. This has been assessed with CVSS: high/critical impact (C:H, I:H, A:H; network/vector: NONE/low comple...

CVE-2019-15824

CVE-2019-15824 affects the WordPress plugin wps-hide-login (versions prior to 1.5.3). The vulnerability is an adminhash protection bypass, enabling bypass of login protections and exposing partial to high impact on confidentiality, integrity, and availability. CVSSv3 scores indicate 9.8 (CRITICAL...

CVE-2019-15824

The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass...

CVE-2019-15824

The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass...

CVE-2019-15823

The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...

CVE-2019-15823

CVE-2019-15823 affects the WPS Hide Login WordPress plugin prior to 1.5.3. The vulnerability is an action=confirmaction protection bypass in the login protection mechanism, allowing bypass of login checks with crafted requests. Impact cited in sources includes unauthorized access risk and protect...

CVE-2019-15822

CVE-2019-15822 affects the WordPress plugin wps-child-theme-generator (before v1.2). The vulnerability is a directory traversal flaw in the plugin’s classes/helpers.php, enabling access to files outside the intended directory. Public sources (NVD/Red Hat/CNVD/CVE listings) consistently describe a...

CVE-2019-15822

The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal...

CVE-2019-15823: Undefined Security Weakness

The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...

CVE-2019-15822: Improper Limitation of a Pathname to a Restricted Directory

The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal...

CVE-2019-15824: Undefined Security Weakness

The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass...

PT-2019-14413

Name of the Vulnerable Software and Affected Versions wps-hide-login plugin versions prior to 1.5.3 Description The issue allows for an adminhash protection bypass. Recommendations For versions prior to 1.5.3, update to version 1.5.3 or later to resolve the issue...

PT-2019-14411

Name of the Vulnerable Software and Affected Versions wps-child-theme-generator plugin version 1.2 and earlier Description The issue concerns a directory traversal vulnerability in the classes/helpers.php file of the wps-child-theme-generator plugin for WordPress. Recommendations For versions pri...