Hide My WP Ghost – Security Plugin, CVE-2024-6420

CVE, Research URL: CVE-2024-6420
Home page URL: Security reports for Hide My WP Ghost – Security Plugin
Application: Hide My WP Ghost – Security Plugin
Published on: Jul 23, 2024
Research Description: The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
Affected versions: max 5.2.02.
Status: vulnerable

Hide My WP Ghost &#8211; Security Plugin, CVE-2024-6420