Vulnerabilities > CVE-2022-1594 - Unspecified vulnerability in HC Custom Wp-Admin URL Project HC Custom Wp-Admin URL 1.4
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
LOW Availability impact
NONE Summary
The HC Custom WP-Admin URL WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, allowing them to change the login URL
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |