CVE-2023-49748: WordPress WPS Hide Login plugin <= 1.9.11 - Secret Login Page Location Disclosure on Multisites vulnerability
Published Jun 4, 2024
·Updated
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPServeur, NicolasKulka, wpformation WPS Hide Login allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPS Hide Login: from n/a through 1.9.11.
Affected Software
2 affected components
Wpserveur WPS Hide Login>n/a, <=1.9.11
WordPress WPS Hide Login<=1.9.11
Remediation
Information
Update to 1.9.12 or a higher version.
Event History
Jun 4, 2024
CVE Published
via MITRE·11:07 AM
Data Sourced
via MITRE·11:07 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-49748?
CVE-2023-49748 is rated as a high-severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2023-49748?
To fix CVE-2023-49748, upgrade the WPS Hide Login plugin to version 1.9.12 or later.
3
What type of vulnerability is CVE-2023-49748?
CVE-2023-49748 is classified as an exposure of sensitive information to an unauthorized actor.
4
What software versions are affected by CVE-2023-49748?
CVE-2023-49748 affects WPS Hide Login versions from n/a through 1.9.11.
5
Who is impacted by CVE-2023-49748?
Users of the WPS Hide Login plugin, particularly on multisite installations, are at risk from CVE-2023-49748.