Lucene search

K
patchstackDaniel RufPATCHSTACK:AF3AE39A0ABFA13CB6626C61617C4740
HistoryMay 18, 2022 - 12:00 a.m.

WordPress HC Custom WP-Admin URL plugin <= 1.4 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability

2022-05-1800:00:00
Daniel Ruf
patchstack.com
9

0.001 Low

EPSS

Percentile

26.0%

Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability discovered by Daniel Ruf in WordPress HC Custom WP-Admin URL plugin (versions <= 1.4).

Solution

Deactivate and delete. This plugin has been closed as of May 5, 2022 and is not available for download. This closure is temporary, pending a full review.

CPENameOperatorVersion
hc custom wp-admin urlle1.4

0.001 Low

EPSS

Percentile

26.0%

Related for PATCHSTACK:AF3AE39A0ABFA13CB6626C61617C4740