High severity8.6NVD Advisory· Published Jul 23, 2024· Updated Jun 17, 2026
CVE-2024-6420
CVE-2024-6420
Description
The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:wpplugins:hide_my_wp_ghost:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:wpplugins:hide_my_wp_ghost:*:*:*:*:*:wordpress:*:*range: <5.2.02
- (no CPE)range: 0
- Range: <5.2.02
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/dfda6577-81aa-4397-a2d6-1d736f9ebd44/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.