title: WP Hide <= 0.0.2 - Unauthenticated Settings Update
description: The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request
problem types: CWE-862 Missing Authorization
affected:
{
vendor: Unknown
product: Wp-Hide
versions:
version: 0.0.2, status: affected, lessThanOrEqual: 0.0.2, versionType: custom
}