This plugin is easily bypassed by browsing to
mysite.tld/wp-admin/async-upload.php. This redirects the user to a login screen and reveals the ‘secret’ directory within the URL.
As of today, the plugin author hasn’t responded to a request for comment.
- The topic ‘[Plugin: Lockdown WP Admin] Easily Bypassed’ is closed to new replies.