Today > | 16 High | 14 Medium vulnerabilities - You can now download lists of IOCs here!

CVE-2024-37881

June 19, 2024, 7:15 a.m.

Product(s) Impacted

SiteGuard WP Plugin

before 1.7.7

Description

SiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php and implements a measure to avoid redirection from other URLs. However, SiteGuard WP Plugin versions prior to 1.7.7 missed to implement a measure to avoid redirection from wp-register.php. As a result, the customized path to the login page may be exposed.

Weaknesses

Date

Published: June 19, 2024, 7:15 a.m.

Last Modified: June 19, 2024, 7:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

vultures@jpcert.or.jp

References

https://jvn.jp/ vultures@jpcert.or.jp

https://plugins.trac.wordpress.org/ vultures@jpcert.or.jp

https://www.jp-secure.com/ vultures@jpcert.or.jp