Hide My WP Ghost – Security Plugin, CVE-2024-13794

CVE, Research URL: CVE-2024-13794
Home page URL: Security reports for Hide My WP Ghost – Security Plugin
Application: Hide My WP Ghost – Security Plugin
Published on: Feb 12, 2025
Research Description: The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the /wp-register.php path. This makes it possible for unauthenticated attackers to discover the hidden login page location.
Affected versions: max 5.4.01.
Status: vulnerable

Hide My WP Ghost &#8211; Security Plugin, CVE-2024-13794