CVE-2023-5089 Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)
Attackers can bypass the hidden login page feature in Defender Security plugin, exposing the login interface to unauthenticated users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-5089?
CVE-2023-5089 is a medium-severity vulnerability in Unknown Defender Security, published on 16 Oct 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.
Which versions are affected by CVE-2023-5089?
It affects 1 product.
Products include Wpmudev Defender Security.
How do I fix CVE-2023-5089?
No fix has been published for CVE-2023-5089 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-5089 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-5089 exists.
Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.
Other vulnerabilities in Unknown Defender Security
Sources
Also known as GHSA-j6r3-vq2c-4ghw.