wps-hide-login Plugin up to 1.5.2 on WordPress wp-login.php Referer 7pk security

entryeditHistoryDiffjsonxmlCTI

A vulnerability was found in wps-hide-login Plugin up to 1.5.2 on WordPress (WordPress Plugin) and classified as critical. Affected by this issue is an unknown functionality of the file wp-login.php. Upgrading to version 1.5.3 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
9331855	08/10/2020	VulD...	cve_nvd_summary	The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field.	mitre.org	08/10/2020	accepted	100
9331854	08/10/2020	VulD...	cve_assigned	1567036800	mitre.org	08/10/2020	accepted	100
9331827	08/10/2020	VulD...	cwe	254 (privilege escalation)		08/10/2020	accepted	100
9331821	08/10/2020	VulD...	type	WordPress Plugin		08/10/2020	accepted	100
9331862	08/31/2019	VulD...	cvss3_vuldb_rc	X		08/31/2019	accepted	90
9331861	08/31/2019	VulD...	cvss3_vuldb_rl	O		08/31/2019	accepted	90
9331860	08/31/2019	VulD...	cvss3_vuldb_e	X		08/31/2019	accepted	90
9331859	08/31/2019	VulD...	cvss2_vuldb_rc	ND		08/31/2019	accepted	90
9331858	08/31/2019	VulD...	cvss2_vuldb_rl	OF		08/31/2019	accepted	90
9331857	08/31/2019	VulD...	cvss2_vuldb_e	ND		08/31/2019	accepted	90
9331856	08/31/2019	VulD...	seealso	141169 141168 141167		08/31/2019	accepted	100
9331853	08/31/2019	VulD...	cve	CVE-2019-15826	mitre.org	08/31/2019	accepted	100
9331852	08/31/2019	VulD...	upgrade_version	1.5.3		08/31/2019	accepted	100
9331851	08/31/2019	VulD...	name	Upgrade		08/31/2019	accepted	100
9331850	08/31/2019	VulD...	price_0day	$0-$5k	see documentation	08/31/2019	accepted	100
9331849	08/31/2019	VulD...	date	1567123200 (08/30/2019)		08/31/2019	accepted	100
9331848	08/31/2019	VulD...	cvss3_vuldb_a	L		08/31/2019	accepted	100
9331847	08/31/2019	VulD...	cvss3_vuldb_i	L		08/31/2019	accepted	100
9331846	08/31/2019	VulD...	cvss3_vuldb_c	L		08/31/2019	accepted	100
9331845	08/31/2019	VulD...	cvss3_vuldb_s	U		08/31/2019	accepted	100