Read the docs

Rename Wp-login Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Rename Wp-login Project records in CISA KEV

No Rename Wp-login Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rename Wp-login 1 record LOW

Records

1 record

TI-2022-01598 CVE-2022-1732 · GHSA-v34p-mccg-6vxw

Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF

Priority LOW 30

The Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00553 Published 2022-07-11 No fix listed CWE-352
Open these records in search →