Lucene search
K

7 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/23 2:28 p.m.3 views

CVE-2026-24578

Missing Authorization vulnerability in Jahid Hasan Admin login URL Change admin-login-url-change allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin login URL Change: from n/a through = 1.1.5...

4.3CVSS5.9AI score0.00048EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 10:17 p.m.5 views

CVE-2022-1732

The Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS6.7AI score0.00235EPSS
Exploits2References1
NVD
NVD
added 2024/04/17 9:15 p.m.10 views

CVE-2024-32337

A cross-site scripting XSS vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ADMIN LOGIN URL parameter under the Security module...

6.1CVSS5.6AI score0.00152EPSS
Exploits1References1
CVE
CVE
added 2024/04/17 12:0 a.m.59 views

CVE-2024-32337

WonderCMS v3.4.3 is affected by a cross-site scripting (XSS) vulnerability in the Settings section, allowing an attacker to inject arbitrary script or HTML via a crafted payload in the ADMIN LOGIN URL parameter under the Security module. The CVE is CVE-2024-32337. Affected component: Settings → S...

6.1CVSS5.8AI score0.00152EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/17 12:0 a.m.3 views

PT-2024-24515 · Wondercms · Wondercms

Name of the Vulnerable Software and Affected Versions: WonderCMS version 3.4.3 Description: A cross-site scripting XSS vulnerability in the Settings section allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ADMIN LOGIN URL parameter under the Securi...

6.1CVSS6AI score0.00152EPSS
Exploits1References7
CNNVD
CNNVD
added 2022/06/13 12:0 a.m.3 views

WordPress plugin HC Custom WP-Admin URL 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS5.6AI score0.00103EPSS
Exploits2References2
Openbugbounty
Openbugbounty
added 2018/05/01 1:38 p.m.8 views

skridsko.net XSS vulnerability

Open Bug Bounty ID: OBB-610730 Description| Value ---|--- Affected Website:| skridsko.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
Rows per page
Query Builder