CVE-2020-36710

概要

参考情報

• blog.nintechnet.com/wordpress-wps-hide-login-fixed-security-issue · Exploit
• wordfence.com/threat-intel/vulnerabilities/id/7808329f-1688-480c-a83c-c4ab2fa86da6 · Third Party Advisory

wps hide login のその他の脆弱性

• CVE-2024-6289中 6.1The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, a…
• CVE-2024-2473中 5.3The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due t…
• CVE-2021-24917高 7.5The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and …
• CVE-2021-3332中 5.3WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via post_password.
• CVE-2015-9498高 8.8The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value.