Skip to content
OpenAdvisories
Unscored Scanner template CVE-2022-1595 EUVD-2022-24884GHSA-rhwm-x5rq-37c2

HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure

Published Jun 13, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request

Affected products

VendorProductAffectedFixed
— HC Custom WP-Admin URL 1.4 – ≤ 1.4 —

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References