CVE-2024-6420 POC (Proof-of-Concept)

The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.

Published: 2024-07-23

CVSS: 8.6

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Download CVE-2024-6420 POC (Proof-of-Concept) here:

Tip: Download official Tor Browser at https://www.torproject.org/download/ to access .onion links.

Check my portfolio here:

https://tlncglobal.com/poc-57-cve-2025-6800/

https://tlncglobal.com/poc-966-cve-2024-45440/

https://tlncglobal.com/poc-585-cve-2024-7339/

https://tlncglobal.com/poc-452-cve-2025-1015/