Jpgp

**Name of the Vulnerable Software and Affected Versions** Hide My WP Ghost WordPress plugin versions prior to 5.2.02 **Description** The issue allows an unauthenticated visitor to access the hidden login page due to the plugin not preventing redirects to the login page via the `auth redirect` WordPress function. **Recommendations** For versions prior to 5.2.02, update to version 5.2.02 or later to resolve the issue. As a temporary workaround, consider restricting access to the login page to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: WPS Hide Login WordPress plugin versions prior to 1.9.16.4 Description: The issue allows an unauthenticated visitor to access the hidden login page due to the plugin not preventing redirects to the login page via the `auth redirect` WordPress function. Recommendations: For versions prior to 1.9.16.4, update to version 1.9.16.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the login page to minimize the risk of exploitation.