title: Protect WP Admin < 4.0 - Unauthenticated Protection Bypass
description: The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered.
problem types: CWE-203: Observable Discrepancy
affected:
{
vendor: Unknown
product: Protect WP Admin
versions:
status: affected, versionType: custom, version: 0, lessThan: 4.0
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}