CVE-2026-110691 WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update

The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a nonce before updating its hidden-login URL settings, which could allow unauthenticated attackers to reassign the login, registration and password-recovery slugs and lock the administrator out of the logi...

CVE-2026-110691 WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update

The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a nonce before updating its hidden-login URL settings, which could allow unauthenticated attackers to reassign the login, registration and password-recovery slugs and lock the administrator out of the logi...

CVE-2026-110691

The WPOrLogin WordPress plugin (versions before 3.1.0 ) is vulnerable to an unauthenticated hide login slug update vulnerability. The root cause is a failure to perform a capability check or nonce validation when updating the plugin's hidden-login URL settings. An unauthenticated attacker could e...

PT-2023-25415 · WordPress · Change Wp Admin Login

Name of the Vulnerable Software and Affected Versions: Change WP Admin Login WordPress plugin versions prior to 1.1.4 Description: The issue allows an attacker to disclose the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered. Recommendations: For version...