CVE-2023-3139

Protect WP Admin WordPress plugin before 4.0 discloses the admin panel URL via a crafted URL redirection, bypassing protection. Root cause: redirection flaw enabling unauthenticated disclosure of the admin URL. Affected versions:

CVE-2021-24906

The CVE-2021-24906 entry concerns the WordPress Protect WP Admin plugin (pre-3.6.2). The vulnerability is an unauthenticated deactivation in lib/pwa-deactivate.php due to missing authorization checks, allowing an unauthenticated attacker to disable the plugin and its protection via a crafted requ...