CVE-2021-36917

Publication date

2021-11-24 16:19:08

Family

Patchstack

State

PUBLISHED

Description

WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrieve a reset token which can then be used to deactivate the plugin.