CVE-2022-3489

The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request

Score

CVSS 3.1 5.3 Medium

Status

Modified - contact@wpscan.com

Published

2022-11-07

Last modified

2025-05-01

Weaknesses

CWE-352, CWE-862

Affected products

• Wp-hide (Unknown)
• Wp Hide (Weberge)

References

• https://wpscan.com/vulnerability/36d78b6c-0da5-44f8-b7b3-eae78edac505