Ultimate Dashboard < 3.7.11 - Login Page Disclosure on Multi-site

2023-12-1200:00:00

wpscan.com

vulnerable

unauthenticated attackers

multi-site instances

ultimate dashboard

AI Score

7.1

Confidence

High

EPSS

Percentile

9.0%

JSON

Description The plugin is vulnerable to secret login page disclosure, allowing unauthenticated attackers to discover the secret login page URL on multi-site instances

References

patchstack.com/database/vulnerability/ultimate-dashboard/wordpress-ultimate-dashboard-plugin-3-7-10-secret-login-page-location-disclosure-on-multisites-vulnerability