Lucene search
Daniel RufWPVDB-ID:3620A087-032E-4A5F-99C8-F9E7E9C29813HistoryJun 16, 2022 - 12:00 a.m.
Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF
2022-06-1600:00:00
Daniel Ruf
wpscan.com
11
0.001 Low
EPSS
Percentile
26.5%
The plugin does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| rename-wp-login | eq | * |
Related
cve
cve
CVE-2022-1732
2022-07-11 13:15:08
prion
prion
Cross site request forgery (csrf)
2022-07-11 13:15:00
wpexploit
wpexploit
Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF
2022-06-16 00:00:00
cnvd
cnvd
WordPress Rename wp-login.php plugin跨站请求伪造漏洞
2022-07-13 00:00:00
cvelist
cvelist
CVE-2022-1732 Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF
2022-07-11 12:56:10
nvd
nvd
CVE-2022-1732
2022-07-11 13:15:08