27 matches found
WordPress Easy Hide Login plugin < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure vulnerability
Login Page Protection Bypass / Hidden URL Disclosure vulnerability discovered by Huseyin Mertoglu in WordPress Plugin Easy Hide Login versions 1.7...
CVE-2026-84168
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
CVE-2026-84168 Easy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
CVE-2026-84168
The Easy Hide Login WordPress plugin, in versions prior to 1.7 , fails to fully enforce its hidden-login protection. This flaw allows an unauthenticated attacker to bypass the security measures by using specific password-reset request parameters to access the standard login page. Furthermore, the...
CVE-2026-84168 Easy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
EUVD-2026-85037
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
PT-2026-97173
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
CVE-2026-84168: Exposure of Sensitive Information to an Unauthorized Actor
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
EUVD-2023-35404
Malicious code in bioql PyPI...
EUVD-2023-36749
Malicious code in bioql PyPI...
CVE-2023-32505
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Arshid Easy Hide Login plugin = 1.0.7 versions...
CVE-2023-31075
Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...
CVE-2023-31075
Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...
CVE-2023-31075
Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...
CVE-2023-31075
CVE-2023-31075 is a CSRF vulnerability in WordPress plugin Easy Hide Login (
CVE-2023-31075 WordPress Easy Hide Login Plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...
CVE-2023-31075: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...
WordPress Plugin Easy Hide Login Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
