Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qhhh-gxxv-pg3h

Опубликовано: 07 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentials on sites in versions up to, and including, 1.5.4.2.

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentials on sites in versions up to, and including, 1.5.4.2.

EPSS

Процентиль: 64%
0.00467
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.3
nvd
больше 2 лет назад

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentials on sites in versions up to, and including, 1.5.4.2.

EPSS

Процентиль: 64%
0.00467
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-863