Filtered by vendor Wpplugins
Subscriptions
Filtered by product Wp Ghost (hide My Wp Ghost)
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-11870 | 2 Wordpress, Wpplugins | 2 Wordpress, Wp Ghost (hide My Wp Ghost) | 2026-07-30 | 5.4 Medium |
| The WP Ghost (Hide My WP Ghost) WordPress plugin before 7.0.05 does not verify that client IP information comes from a trusted proxy before trusting attacker-controllable HTTP headers, allowing unauthenticated attackers to spoof their IP address to bypass the WP Ghost (Hide My WP Ghost) WordPress plugin before 7.0.05's own brute-force protection and to downgrade its firewall by matching a hardcoded whitelisted IP range. | ||||
Page 1 of 1.