Unrated severityNVD Advisory· Published Sep 23, 2026

CVE-2026-84168

Description

The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page, defeating the Easy Hide Login WordPress plugin before 1.7's core protection.

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/be4e40a1-8f2e-4c80-8615-77cc325c90b6/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000