CVE-2022-3489: Weberge Wp Hide

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settings, allowing unauthenticated attackers to update it with a crafted request

Affected products

• Weberge Wp Hide: up to and including 0.0.2

Published 2022-11-07. Last modified 2026-06-17.