CVE-2021-24917

概要

参考情報

• wordpress.org/support/topic/bypass-security-issue · Third Party Advisory
• wpscan.com/vulnerability/15bb711a-7d70-4891-b7a2-c473e3e8b375 · Exploit

wps hide login のその他の脆弱性

• CVE-2024-6289中 6.1The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, a…
• CVE-2024-2473中 5.3The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due t…
• CVE-2020-36710高 7.5The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the logi…
• CVE-2021-3332中 5.3WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via post_password.
• CVE-2015-9498高 8.8The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value.