WordPress plugin
WPS Hide Login security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium8
- Low1
All WPS Hide Login vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Login Page Disclosure ≤1.9.16.3Update to 1.9.16.4 | CVE-2024-6289 | |
| Medium5.3 | Login Page Disclosure ≤1.9.15.2Update to 1.9.16 | CVE-2024-2473 | |
| Low3.7 | Hidden Login Page Location Disclosure ≤1.9.11Update to 1.9.12 | CVE-2023-49748 | |
| Medium5.3 | Hidden Login Page Location Disclosure ≤1.9.0Update to 1.9.1 | CVE-2021-24917 | |
| Medium5.3 | Hidden Login Page Location Disclosure ≤1.5.4.2Update to 1.5.5 | CVE-2020-36710 | |
| Medium5.3 | Login Page Disclosure via 'action=rp' ≤1.5.2.2Update to 1.5.3 | CVE-2019-15825 | |
| Medium5.3 | Login Page Disclosure via Referer Header ≤1.5.2.2Update to 1.5.3 | CVE-2019-15826 | |
| Medium5.3 | Login Page Disclosure via 'action=confirmaction' <1.5.3Update to 1.5.3 | CVE-2019-15823 | |
| Medium5.3 | Login Page Disclosure via 'adminhash' ≤1.5.2.2Update to 1.5.3 | CVE-2019-15824 | |
| High8.8 | Cross-Site Request Forgery <1.1Update to 1.1 | CVE-2015-9498 |
- Medium5.3Login Page Disclosure
≤1.9.16.3Update to 1.9.16.4
- Medium5.3Login Page Disclosure
≤1.9.15.2Update to 1.9.16
- Low3.7Hidden Login Page Location Disclosure
≤1.9.11Update to 1.9.12
- Medium5.3Hidden Login Page Location Disclosure
≤1.9.0Update to 1.9.1
- Medium5.3Hidden Login Page Location Disclosure
≤1.5.4.2Update to 1.5.5
- Medium5.3Login Page Disclosure via 'action=rp'
≤1.5.2.2Update to 1.5.3
- Medium5.3Login Page Disclosure via Referer Header
≤1.5.2.2Update to 1.5.3
- Medium5.3Login Page Disclosure via 'action=confirmaction'
<1.5.3Update to 1.5.3
- Medium5.3Login Page Disclosure via 'adminhash'
≤1.5.2.2Update to 1.5.3
- High8.8Cross-Site Request Forgery
<1.1Update to 1.1
WPS Hide Login: common questions
Does WPS Hide Login have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in WPS Hide Login: 1 high, 8 medium, 1 low. None are known to affect version null.
How do I check which version of WPS Hide Login I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WPS Hide Login vulnerability?
CVE-2024-6289, published Jun 24, 2024: WPS Hide Login <= 1.9.16.3 - Login Page Disclosure. Severity: Medium (CVSS 5.3).
Is any WPS Hide Login vulnerability listed in CISA KEV?
No. None of the known WPS Hide Login vulnerabilities is currently listed in the CISA KEV catalog.