CVE-2022-1595 HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure

2022-06-1312:42:03

CWE-200

WPScan

www.cve.org

0.002 Low

EPSS

Percentile

52.8%

JSON

The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request

CNA Affected

[
  {
    "product": "HC Custom WP-Admin URL",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.4",
        "status": "affected",
        "version": "1.4",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/0218c90c-8f79-4f37-9a6f-60cf2f47d47b

0.002 Low

EPSS

Percentile

52.8%

JSON

Related for CVELIST:CVE-2022-1595