Description
The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Wp-Hide | 0.0.2 – ≤ 0.0.2 | — |