1098 matches found
CVE-2019-15823
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...
Authentication flaw
The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...
Design/Logic Flaw
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...
Design/Logic Flaw
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...
CVE-2019-15826
The CVE concerns the WordPress plugin wps-hide-login prior to 1.5.3, which exposes a protection bypass through the Referer header in wp-login.php. Affected component: the wps-hide-login plugin for WordPress (version
CVE-2019-15825
The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...
CVE-2019-15825
The CVE-2019-15825 issue affects the WordPress plugin wps-hide-login before 1.5.3, where an action=rp&key&login protection bypass enables an unauthenticated attacker to bypass login protections. This has been assessed with CVSS: high/critical impact (C:H, I:H, A:H; network/vector: NONE/low comple...
CVE-2019-15824
The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass...
CVE-2019-15824
CVE-2019-15824 affects the WordPress plugin wps-hide-login (versions prior to 1.5.3). The vulnerability is an adminhash protection bypass, enabling bypass of login protections and exposing partial to high impact on confidentiality, integrity, and availability. CVSSv3 scores indicate 9.8 (CRITICAL...
CVE-2019-15823
CVE-2019-15823 affects the WPS Hide Login WordPress plugin prior to 1.5.3. The vulnerability is an action=confirmaction protection bypass in the login protection mechanism, allowing bypass of login checks with crafted requests. Impact cited in sources includes unauthorized access risk and protect...
CVE-2019-15822
CVE-2019-15822 affects the WordPress plugin wps-child-theme-generator (before v1.2). The vulnerability is a directory traversal flaw in the plugin’s classes/helpers.php, enabling access to files outside the intended directory. Public sources (NVD/Red Hat/CNVD/CVE listings) consistently describe a...
WordPress WPS Hide Login plugin <= 1.5.2.2 - Multiples Security Issues
Multiples Security Issues found by Julio Potier in WordPress WPS Hide Login plugin versions = 1.5.2.2. Solution Update the WordPress WPS Hide Login plugin to the latest available version at least 1.5.3...
WordPress WPS Bidouille plugin <= 1.12.2 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Julio Potier in WordPress WPS Bidouille plugin versions = 1.12.2. Solution Update the WordPress WPS Bidouille plugin to the latest available version at least 1.12.4...
WordPress WPS Bidouille plugin <= 1.12.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability found by Julio Potier in WordPress WPS Bidouille plugin versions = 1.12.2. Solution Update the WordPress WPS Bidouille plugin to the latest available version at least 1.12.4...
WordPress WPS Limit Login plugin <= 1.4.5 - Stored Cross-Site Scripting (XSS) and Protection Bypass vulnerabilities
Stored Cross-Site Scripting XSS and Protection Bypass vulnerabilities found by Julio Potier in WordPress WPS Limit Login plugin versions = 1.4.5. Solution Update the WordPress WPS Limit Login plugin to the latest available version at least 1.4.6...
WordPress WPS Cleaner plugin <= 1.4.4 - Cross-Site Request Forgery (CSRF) + media disclosure vulnerabilities
Cross-Site Request Forgery CSRF + media disclosure vulnerabilities found by Julio Potier in WordPress WPS Cleaner plugin versions = 1.4.4. Solution Update the WordPress WPS Cleaner plugin...
WordPress WPS Child Themes Generator plugin <= 1.1 - Path Traversal vulnerability
Path Traversal vulnerability found by Julio Potier in WordPress WPS Child Themes Generator plugin versions = 1.1. Solution Update the WordPress WPS Child Themes Generator plugin to the latest available version at least 1.2...
WordPress WPS Bidouille plugin <= 1.12.2 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability found by Julio Potier in WordPress WPS Bidouille plugin versions = 1.12.2. Solution Update the WordPress WPS Bidouille plugin to the latest available version at least 1.12.4...
