JVN#60331535: WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page

WordPress plugin “SiteGuard WP Plugin” provided by EG Secure Solutions Inc. provides a functionality to customize the path to the login page wp-login.php.
The plugin implements a measure to avoid redirection from other URLs, but missed to implement a measure to avoid redirection from wp-register.php (CWE-201).

Impact

The customized path to the login page may be exposed.

Solution

Update the plugin
Update the plugin to the latest version according to the information provided by the developer.

Products Affected

• SiteGuard WP Plugin versions prior to 1.7.7