CVE-2024-2473

CVE-2024-2473 — WPS Hide Login 登录页面识别工具 一款专业的 Python 扫描器，用于检测运行 WPS Hide Login ≤ 1.9.15.2 的 WordPress 站点中登录页面泄露漏洞 由Venexy 编写 目录 概述 漏洞详情 工作原理 系统要求 安装 使用方法 输出示例 免责声明 参考链接 概述 WPS Hide Login 是一款流行的 WordPress 插件，允许管理员将默认的 /wp-login.php URL 更改为自定义的隐藏路径——这是一种通过模糊实现安全的手段。 此扫描器检测 CVE-2024-2473...

VulnCheck KEV: CVE-2024-2473

The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due to a bypass that is created when the 'action=postpass' parameter is supplied. This makes it possible for attackers to easily discover any login page that may...

CVE-2024-2473

The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due to a bypass that is created when the 'action=postpass' parameter is supplied. This makes it possible for attackers to easily discover any login page that may...