CVE-2026-84168 — Easy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure

CVE-2026-84168

Easy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure PUBLISHED

Description (CNA)

The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page, defeating the Easy Hide Login WordPress plugin before 1.7's core protection.

Affected (CNA)

Vendor / product	Versions
Unknown / Easy Hide Login	affected 0 before 1.7

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/be4e40a1-8f2e-4c80-8615-77cc325c90b6/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.