CVE-2022-1594

Name of the Vulnerable Software and Affected Versions HC Custom WP-Admin URL WordPress plugin versions 1.4 and earlier

Description The issue concerns the lack of a CSRF check when updating settings in the plugin, which could allow attackers to make a logged-in admin change them via a CSRF attack. This would enable attackers to change the login URL.

Recommendations For HC Custom WP-Admin URL WordPress plugin versions 1.4 and earlier, update to a version that includes a CSRF check for settings updates to prevent potential attacks.