The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass.Referenceshttps://wpvulndb.com/vulnerabilities/9469https://wordpress.org/plugins/wps-hide-login/#developershttps://secupress.me/blog/wps-hide-login-v1-5-2-2-multiples-vulnerabilities/