{"id":"CVE-2023-5089","aliases":["EUVD-2023-57429","GHSA-j6r3-vq2c-4ghw"],"status":"published","title":"Defender Security \u003c 4.1.0 - Protection Bypass (Hidden Login Page)","description":"The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02473,"percentile":0.84641,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-209"],"published":"2023-10-16T19:39:25Z","modified":"2026-06-17T06:47:30Z","exploits":[{"source":"nuclei","id":"CVE-2023-5089","title":"Defender Security \u003c 4.1.0 - Protection Bypass (Hidden Login Page)","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5089.yaml"},{"source":"pocgithub","id":"Cappricio-Securities/CVE-2023-5089","title":"Cappricio-Securities/CVE-2023-5089","date":"2024-05-24","url":"https://github.com/Cappricio-Securities/CVE-2023-5089"}],"products":[{"vendor":"unknown","product":"defender security"},{"vendor":"wpmudev","product":"defender_security"}],"references":[{"url":"https://wpscan.com/vulnerability/2b547488-187b-44bc-a57d-f876a7d4c87d","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.sprocketsecurity.com/resources/discovering-wp-admin-urls-in-wordpress-with-gravityforms","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5089"},{"url":"https://github.com/advisories/GHSA-j6r3-vq2c-4ghw"}],"sources":{"cve":[{"id":"CVE-2023-5089","title":"Defender Security \u003c 4.1.0 - Protection Bypass (Hidden Login Page)","description":"The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.","status":"published","published":"2023-10-16T19:39:25.42Z","modified":"2025-04-23T16:10:59.957Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:35:17.149492Z"}],"euvd":[{"id":"EUVD-2023-57429","description":"The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.","status":"published","published":"2023-10-16T19:39:25Z","modified":"2025-04-23T16:10:59Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:13.204099Z"}],"ghsa":[{"id":"GHSA-j6r3-vq2c-4ghw","title":"The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page...","description":"The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.","status":"published","published":"2023-10-16T21:30:27Z","modified":"2024-04-04T08:42:05Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:57:00.717739Z"}],"nvd":[{"id":"CVE-2023-5089","description":"The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.","status":"published","published":"2023-10-16T20:15:17.737Z","modified":"2026-06-17T06:47:30.853Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:08:37.83429Z"}]}}