Approved changes feed: RSS · Atom

cpe:2.3:a:tabrisrp:wps_hide_login:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTabrisrp (99618f82-de0b-54cb-b423-687209ddf3dc)
ProductWps Hide Login (888aa4cb-57b2-5c79-8079-371cdc690ca3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2473 vulnerable 2026-06-08 06:33:31.191696 WPS Hide Login <= 1.9.15.2 - Login Page Disclosure
MEDIUM (5.3)
The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due to a bypass that is created when the 'action=postpass' parameter is supplied. This makes it possible for attackers to easily discover any login page that may have been hidden by the plugin.
Published: 2024-06-11T02:01:58.830Z
Updated: 2026-04-08T17:34:54.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36710 vulnerable 2026-06-08 05:25:49.443365 WPS Hide Login <= 1.5.4.2 - Hidden Login Page Location Disclosure
MEDIUM (5.3)
The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentials on sites in versions up to, and including, 1.5.4.2.
Published: 2023-06-07T01:51:26.862Z
Updated: 2026-04-08T17:01:48.320Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.