CVE-2023-3604

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p56

Published

Aug 21, 2023 (Aug 21, 2023)

Modified

Jun 17, 2026

Description

The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered.

Vendors: wpexperts
Products: all in one login
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.