Low · 3.7 CVE-2023-47818 EUVD-2023-51913GHSA-frch-m9m2-4xv8

WordPress LWS Hide Login plugin <= 2.1.8 - Secret Login Page Location Disclosure on Multisites vulnerability

Published Jun 4, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in LWS LWS Hide Login allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LWS Hide Login: from n/a through 2.1.8.

Affected products

Vendor	Product	Affected	Fixed
LWS	LWS Hide Login	≤ 2.1.8	—

References

https://patchstack.com/database/vulnerability/lws-hide-login/wordpress-lws-hide-login-plugin-2-1-8-secret-login-page-location-disclosure-on-multisites-vulnerability?_s_id=cve vdb-entry