CVE-2022-1595CWE-200

HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure

published June 13, 2022

CVSS
—
EPSS
3%
Percentile
86.9
In the wild
Unconfirmed
What it is

The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02903 · 86.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-06-13T12:42Z
EPSS history
Timeline
  • 13 JUN 12:42Z
    HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure
    cvelistv5