177 matches found
WPS Hide Login <= 1.9.15.2 - Login Page Disclosure
The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due to a bypass that is created when the 'action=postpass' parameter is supplied. This makes it possible for attackers to easily discover any login page that may...
CVE-2024-2473
CVE-2024-2473 — Identificador de la página de inicio de sesión de WPS Hide Login Un escáner profesional en Python para detectar la divulgación de la página de inicio de sesión en sitios WordPress que ejecutan WPS Hide Login ≤ 1.9.15.2 Programado porVenexy Tabla de contenidos Resumen Detalles de l...
WordPress Easy Hide Login plugin < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure vulnerability
Login Page Protection Bypass / Hidden URL Disclosure vulnerability discovered by Huseyin Mertoglu in WordPress Plugin Easy Hide Login versions 1.7...
CVE-2026-84168
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
CVE-2026-84168 Easy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
CVE-2026-84168 Easy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
EUVD-2026-85037
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
CVE-2026-84168
The Easy Hide Login WordPress plugin, in versions prior to 1.7 , fails to fully enforce its hidden-login protection. This flaw allows an unauthenticated attacker to bypass the security measures by using specific password-reset request parameters to access the standard login page. Furthermore, the...
PT-2026-97173
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
CVE-2026-84168: Exposure of Sensitive Information to an Unauthorized Actor
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
Exploit for CVE-2024-2473
CVE-2024-2473 — WPS Hide Login Page Identifier A profession...
WPS Hide Login <= 1.5.2.2 - Login Page Bypass
WPS-Hide-Login plugin before 1.5.3 for WordPress contains an action=confirmaction protection bypass, letting attackers bypass security checks, exploit requires sending crafted requests. id: CVE-2019-15823 info: name: WPS Hide Login = 1.5.2.2 - Login Page Bypass author: pussycat0x severity: high...
CVE-2025-12374: Improper Authentication
The Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.44. This is due to the plugin not properly validating that an OTP was generate...
EUVD-2020-24152
Malware in sbrugna...
EUVD-2019-6743
Malware in sbrugna...
EUVD-2021-26663
Malware in sbrugna...
EUVD-2019-6742
Malware in sbrugna...
EUVD-2019-6740
Malware in sbrugna...