CVE-2024-6420: Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure
Published Jul 23, 2024
·Updated
The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the authredirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
Affected Software
2 affected components
Hide My WP Ghost<5.2.02
WPPlugins Hide My Wp Ghost Wordpress<5.2.02
Event History
Jul 23, 2024
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-6420?
CVE-2024-6420 is considered a medium severity vulnerability as it allows unauthenticated access to the hidden login page.
2
How do I fix CVE-2024-6420?
To fix CVE-2024-6420, update the Hide My WP Ghost plugin to version 5.2.02 or later.
3
What software is affected by CVE-2024-6420?
CVE-2024-6420 affects the Hide My WP Ghost plugin for WordPress versions prior to 5.2.02.
4
What is the impact of CVE-2024-6420?
The impact of CVE-2024-6420 is that it may expose the hidden login page to unauthorized users, potentially leading to further security risks.
5
Is there a patch available for CVE-2024-6420?
Yes, a patch is available in version 5.2.02 of the Hide My WP Ghost plugin.