CVE-2023-48335: WordPress Hide login page plugin <= 1.1.9 - Secret Login Page Location Disclosure on Multisites vulnerability
Published Jun 4, 2024
·Updated
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Webcraftic Hide login page allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hide login page: from n/a through 1.1.9.
Affected Software
2 affected components
Webcraftic Hide login page<=1.1.9
WordPress Hide login page plugin<=1.1.9
Event History
Jun 4, 2024
CVE Published
via MITRE·10:40 AM
Data Sourced
via MITRE·10:40 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-48335?
CVE-2023-48335 has a medium severity rating due to its potential to expose sensitive information.
2
How do I fix CVE-2023-48335?
To fix CVE-2023-48335, update the Webcraftic Hide login page plugin to version 1.1.10 or later.
3
What versions are affected by CVE-2023-48335?
CVE-2023-48335 affects versions of Webcraftic Hide login page up to and including 1.1.9.
4
What kind of vulnerability is CVE-2023-48335?
CVE-2023-48335 is an exposure of sensitive information vulnerability caused by inadequate access controls.
5
Who is impacted by CVE-2023-48335?
Users of the Webcraftic Hide login page plugin for WordPress running versions up to 1.1.9 are impacted by CVE-2023-48335.