CVE-2022-1595: vulnerability in HC Custom WP-Admin URL
HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure
Published · Updated
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 2.9%
exploitation probability
2.9%top 13% of all CVEs
observed exploitation
nono source reports it
The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request
Affected products
Unknown · HC Custom WP-Admin URLRelated CVEs — HC Custom WP-Admin URL
In the same product, most dangerous first.