Skip to content
OpenAdvisories
Low · 3.7 CVE-2023-49748 EUVD-2023-53671GHSA-j8x3-47f7-r67m

WordPress WPS Hide Login plugin <= 1.9.11 - Secret Login Page Location Disclosure on Multisites vulnerability

Published Jun 4, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WPServeur, NicolasKulka, wpformation Product: WPS Hide Login

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPServeur, NicolasKulka, wpformation WPS Hide Login allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPS Hide Login: from n/a through 1.9.11.

Affected products

VendorProductAffectedFixed
WPServeur, NicolasKulka, wpformation WPS Hide Login ≤ 1.9.11 —

References