CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects WordPress.
CVE
CVE-2023-5089
Severity
MEDIUM
CVSS
5.3
EPSS
2.23%
WordPress
Original NVD Description
The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.
Related CVEs
Other vulnerabilities affecting the same vendor(s)