CVE-2020-36710
WPS Hide Login <= 1.5.4.2 - Hidden Login Page Location Disclosure
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentials on sites in versions up to, and including, 1.5.4.2.
| CWE | CWE-863 |
| Vendor | tabrisrp |
| Product | wps hide login |
| Published | Jun 7, 2023 |
| Last Updated | Apr 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for tabrisrp wps hide login
Be the first to know when new medium vulnerabilities affecting tabrisrp wps hide login are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
tabrisrp / WPS Hide Login
0 ≤ 1.5.4.2
References
Credits
Jerome Bruandet