Now officially on WordPress.org

CVE Database / CVE-2020-36710

CVE · Medium

CVE-2020-36710 — WPS Hide Login [wps-hide-login] < 1.5.5

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2020-36710 WPS Hide Login [wps-hide-login] < 1.5.5 Incorrect Authorization Medium 5.3 < 1.5.5 1.5.5 2020-01-27 —

CVE-2020-36710

The WPS Hide Login plugin for WordPress versions up to and including 1.5.4.2 contains a flaw that allows the login page to be discovered and accessed despite the plugin being configured to conceal it, enabling unauthenticated attackers to perform credential brute force attacks against affected installations. The vulnerability undermines the plugin's core security function of hiding the WordPress login interface. This issue was addressed in version 1.5.5 and later.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings