CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Webcraftic Hide login page allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hide login page: from n/a through 1.1.9.
Explanation of Vulnerability in Simple Terms
The Hide Login Page plugin for WordPress contains an information exposure vulnerability in versions up to 1.1.9. The plugin fails to properly restrict access to sensitive information, allowing an attacker to discover or access login page details through network requests. This requires specific conditions to exploit but does not require authentication or user interaction.
What an attacker can do
Discover or access information about the site's login page configuration without authentication.
Potential impact on your site
Attackers may learn details about your login page location or configuration, potentially aiding further attacks.
Conditions required to exploit
Network access to the site; exploitation requires specific conditions or timing.
Key dates
External resources
Related vulnerabilities
