CVE-2022-1732

🗓️ 11 Jul 2022 12:56:10Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 64 Views🌐 WEB

The Rename wp-login.php WordPress plugin through 2.6.0 lacks CSRF check, allowing attackers to modify secret login URL via CSRF attack

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-1732	11 Jul 202213:15	–	attackerkb
Circl	CVE-2022-1732	11 Jul 202216:19	–	circl
CNNVD	WordPress plugin Rename wp-login.php 跨站请求伪造漏洞	11 Jul 202200:00	–	cnnvd
CNVD	WordPress Rename wp-login.php plugin跨站请求伪造漏洞	13 Jul 202200:00	–	cnvd
Cvelist	CVE-2022-1732 Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF	11 Jul 202212:56	–	cvelist
EUVD	EUVD-2022-25013	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1732	11 Jul 202213:15	–	nvd
OSV	CVE-2022-1732	11 Jul 202213:15	–	osv
Prion	Cross site request forgery (csrf)	11 Jul 202213:15	–	prion
RedhatCVE	CVE-2022-1732	22 May 202522:17	–	redhatcve

NVD

Vulners

Node

rename_wp-login_project rename_wp-loginRange≤2.6.0wordpress

[
  {
    "product": "Rename wp-login.php",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "2.6.0",
        "status": "affected",
        "version": "2.6.0",
        "versionType": "custom"
      }
    ]
  }
]