CVE-2024-6420

CVE-2024-6420: Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure

Vendor Unknown
Product Hide My WP Ghost
Published July 23, 2024
Last update August 27, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.

Key dates

02Disclosure timeline

July 23, 2024 CVE published
August 27, 2025 Record updated