backdoor in plugin

  • Resolved szymonpankowski

    (@szymonpankowski)


    5 years, 4 months ago

    idk if it will works for all of the websites which use WPS Hide Login but..
    here is an instruction:
    tape target url-site/anything -> you are redirect in most of the cases to 404 site with options like: search, channels, and ass well login button
    now make a search – can be anything -> then try to click login button -> and you are redirected to url-site/hidden-login-page

    If you afraid of your website:
    Solution: disabled WordPress build in search function

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author NicolasKulka

    (@nicolaskulka)

    Yes, perfectly, you need to remove the public connection URL, otherwise the plugin has no interest.

    @nicolaskulka Sorry, what does this mean: “…remove the public connection URL, otherwise the plugin has no interest…”? How do we do this?

    Désolé, qu’est-ce que cela signifie: “… supprimer l’URL de connexion publique, sinon le plugin n’a aucun intérêt …”? Comment faisons-nous cela?

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘backdoor in plugin’ is closed to new replies.

Tags