CVE-2020-36710

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p54

Published

Jun 7, 2023 (Jun 7, 2023)

Modified

Jun 17, 2026

Description

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentials on sites in versions up to, and including, 1.5.4.2.

Vendors: wpserveur
Products: wps hide login
Ecosystems: WordPress
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.