Vulnerability · Published Dec 6, 2021 · Assigned by WPScan
CVE-2021-24917WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header
High 7.5
In plain English
A high-severity incorrect authorization in WPS Hide Login from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 72.2% (higher than 99.4% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)72.2%top 0.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling3Metasploit, Nuclei, Public PoC
Official description
The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | WPS Hide Login | 1.9.1 – before 1.9.1 |
Weakness: CWE-863
References
- https://wpscan.com/vulnerability/15bb711a-7d70-4891-b7a2-c473e3e8b375 x_refsource_MISC
- https://wordpress.org/support/topic/bypass-security-issue/ x_refsource_MISC