← Zuruck zu CVEs

CVE-2023-5089

MEDIUM

5.3

Beschreibung

The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.

CVE Details

CVSS v3.1 Bewertung5.3

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht10/16/2023

Zuletzt geandert4/23/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

wpmudev:defender_security

Referenzen

https://wpscan.com/vulnerability/2b547488-187b-44bc-a57d-f876a7d4c87d(contact@wpscan.com)

https://www.sprocketsecurity.com/resources/discovering-wp-admin-urls-in-wordpress-with-gravityforms(contact@wpscan.com)

https://wpscan.com/vulnerability/2b547488-187b-44bc-a57d-f876a7d4c87d(af854a3a-2127-422b-91ae-364da2661108)

https://www.sprocketsecurity.com/resources/discovering-wp-admin-urls-in-wordpress-with-gravityforms(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.