7.5
High
CVE-2023-3604 The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a…
Description
The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Change WP Admin Login 1.1 | earliest → < 1.1.4 | 1.1.4 |