Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-1594
HistoryJun 13, 2022 - 1:15 p.m.

Cross site request forgery (csrf)

2022-06-1313:15:00
PRIOn knowledge base
www.prio-n.com
2

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%

The HC Custom WP-Admin URL WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, allowing them to change the login URL

CPENameOperatorVersion
hc_custom_wp-admin_urlle1.4

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%