Improper Restriction of Excessive Authentication Attempts vulnerability in Hide My WP Ghost

CVE-2023-34001

5.3MEDIUM

Key Information

Vendor: WPplugins – WordPress Security Plugins
Status: Hide My WP Ghost
Vendor: CVE Published:; 4 June 2024

Summary

Improper Restriction of Excessive Authentication Attempts vulnerability in WPPlugins – WordPress Security Plugins Hide My WP Ghost allows Functionality Bypass.This issue affects Hide My WP Ghost: from n/a through 5.0.25.

Affected Version(s)

Hide My WP Ghost <= 5.0.25

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Jun 4, 2024
Vulnerability Reserved.
May 25, 2023

Collectors

NVD DatabaseMitre Database

Credit

konagash (Patchstack Alliance)