CVE-2024-6420 Scanner

Hide My WP Ghost is a popular security plugin for WordPress, utilized by website administrators to conceal login paths and strengthen login security on WordPress-based sites. It is especially valued by users who want to shield their WordPress login page from unauthorized access and limit exposure to brute-force attacks. The plugin achieves this by obfuscating login URLs and redirecting standard login paths to user-defined ones. However, an issue has been identified that bypasses the plugin’s redirection functionality, exposing hidden login URLs. Users, developers, and security professionals may need to address this vulnerability to protect administrative access.

The identified vulnerability in Hide My WP Ghost allows unauthenticated users to access hidden login URLs despite redirection rules. This flaw leverages the auth_redirect function, which, when improperly managed, fails to prevent redirections to sensitive login paths. Malicious actors can exploit this by directly navigating to the hidden login page, bypassing security configurations. This type of unauthorized access vulnerability undermines the core security function of the plugin.

The vulnerability stems from an improper handling of the auth_redirect function in the plugin. When an unauthenticated request is made to the site, the plugin is supposed to redirect non-authorized users away from the hidden login path. However, it fails to enforce this rule effectively, exposing the login page. The issue occurs particularly when specific URL structures are appended, such as /?gf_page=randomstring, which bypasses the security settings. This allows unauthorized visitors to locate and access the hidden login page without administrative privileges, circumventing intended restrictions.

When exploited, this vulnerability may allow malicious actors to discover and access hidden login paths, compromising the security configurations set by administrators. This can lead to unauthorized login attempts, escalating the risk of brute-force attacks and potential account takeover. It weakens the plugin's purpose by exposing sensitive login locations, potentially leading to unauthorized administrative access and further exploitation of the WordPress site. If leveraged with other vulnerabilities, it may also aid in launching more sophisticated attacks.

S4E enables a proactive approach to safeguarding digital assets. Through its comprehensive vulnerability scanning, users gain insights into critical security flaws like the Hidden Login Page Disclosure in WordPress plugins. Members benefit from regular updates, accurate security reports, and best-in-class remediation guidance tailored for diverse environments. Join the platform to enhance your cybersecurity posture, safeguard your digital assets, and receive timely alerts on emerging threats, ensuring continuous protection.

References:

• https://wpscan.com/vulnerability/dfda6577-81aa-4397-a2d6-1d736f9ebd44/
• https://www.sprocketsecurity.com/resources/discovering-wp-admin-urls-in-wordpress-with-gravityforms/
• https://nvd.nist.gov/vuln/detail/CVE-2024-6420