CVE-2023-3139
Protect WP Admin < 4.0 - Unauthenticated Protection Bypass
Vexday Risk Score
18Low
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
04 Jul 2023Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered.
Affected products
Unknown · Protect WP Admin