Authentication Bypass in Easy Hide Login Plugin for WordPress
CVE-2026-84168
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 23 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-84168?
The Easy Hide Login WordPress plugin prior to version 1.7 is vulnerable to an authentication bypass that permits unauthenticated attackers to access the standard login page. By manipulating specific password-reset request parameters, an attacker can retrieve the configured secret login slug, effectively neutralizing the plugin's core protective features and potentially exposing sensitive information.
Affected Version(s)
Easy Hide Login 0 < 1.7
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.