Description
SiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php and implements a measure to avoid redirection from other URLs. However, SiteGuard WP Plugin versions prior to 1.7.7 missed to implement a measure to avoid redirection from wp-register.php. As a result, the customized path to the login page may be exposed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EG Secure Solutions | SiteGuard WP Plugin | prior to 1.7.7 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- SiteGuard WP Plugin <= 1.7.6 - Login Page Disclosure http/cves/2024/CVE-2024-37881.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.