CVE-2015-9498: Wpserveur WPS Hide Login

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value.

Affected products

• Wpserveur WPS Hide Login: before 1.1 (fixed in 1.1)

Published 2019-10-22. Last modified 2026-06-17.