https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:10:30.575854+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24917 CVE-2021-24917 — WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header 2026-10-17T15:10:30.577094+00:00

Affected: Unknown WPS Hide Login

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user.