CVE-2022-1732 | BDVDB-2026-179686 Detail

Rename wp-login.php

Description#

The Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack

Impact#

No impact statement in the source data.

Weaknesses#

CWE-352 Cross-Site Request Forgery (CSRF)

References#

https://wpscan.com/vulnerability/3620a087-032e-4a5f-99c8-f9e7e9c29813

Exploit#

No public exploit known

History#

Version 12022-07-11Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.