Description
WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrieve a reset token which can then be used to deactivate the plugin.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wpWave | Hide My WP (WordPress plugin) | <= 6.2.3 – ≤ 6.2.3 | — |