Lucene search

K
cve[email protected]CVE-2024-37881
HistoryJun 19, 2024 - 7:15 a.m.

CVE-2024-37881

2024-06-1907:15:46
web.nvd.nist.gov
35
siteguard
plugin
vulnerability
custom login
path

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

SiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php and implements a measure to avoid redirection from other URLs. However, SiteGuard WP Plugin versions prior to 1.7.7 missed to implement a measure to avoid redirection from wp-register.php. As a result, the customized path to the login page may be exposed.

Affected configurations

Vulners
Node
eg_secure_solutions_inc.siteguard_wp_pluginRange<1.7.7

CNA Affected

[
  {
    "vendor": "EG Secure Solutions Inc.",
    "product": "SiteGuard WP Plugin",
    "versions": [
      {
        "version": "prior to 1.7.7",
        "status": "affected"
      }
    ]
  }
]

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

Related for CVE-2024-37881