CVE-2024-37881

SiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php and implements a measure to avoid redirection from other URLs. However, SiteGuard WP Plugin versions prior to 1.7.7 missed to implement a measure to avoid redirection from wp-register.php. As a resul...

CVE-2024-37881

SiteGuard WP Plugin is vulnerable up to version 1.7.6 because redirects from wp-register.php were not restricted, which may disclose the customized login page path (wp-login.php). This could expose the login URL, enabling targeted access attempts. Remediation: upgrade to SiteGuard WP Plugin 1.7.7...

WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page

Overview WordPress plugin "SiteGuard WP Plugin" provided by EG Secure Solutions Inc. provides a functionality to customize the path to the login page wp-login.php. The plugin implements a measure to avoid redirection from other URLs, but missed to implement a measure to avoid redirection from...

JVN#60331535: WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page

WordPress plugin "SiteGuard WP Plugin" provided by EG Secure Solutions Inc. provides a functionality to customize the path to the login page wp-login.php. The plugin implements a measure to avoid redirection from other URLs, but missed to implement a measure to avoid redirection from...

WordPress plugin SiteGuard security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-27808 · WordPress · Siteguard Wp Plugin

Name of the Vulnerable Software and Affected Versions: SiteGuard WP Plugin versions prior to 1.7.7 Description: The issue concerns the SiteGuard WP Plugin's functionality to customize the path to the login page wp-login.php. It was found that versions of the plugin prior to 1.7.7 failed to...