Lucene search
PRIOn knowledge basePRION:CVE-2022-1732HistoryJul 11, 2022 - 1:15 p.m.
Cross site request forgery (csrf)
2022-07-1113:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
26.5%
The Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack
| CPE | Name | Operator | Version |
|---|---|---|---|
| rename_wp-login | le | 2.6.0 |
Related
cve
cve
CVE-2022-1732
2022-07-11 13:15:08
cvelist
cvelist
CVE-2022-1732 Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF
2022-07-11 12:56:10
wpvulndb
wpvulndb
Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF
2022-06-16 00:00:00
cnvd
cnvd
WordPress Rename wp-login.php plugin跨站请求伪造漏洞
2022-07-13 00:00:00
wpexploit
wpexploit
Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF
2022-06-16 00:00:00
nvd
nvd
CVE-2022-1732
2022-07-11 13:15:08