CVE Catalog
CVE-2023-3139
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.69%
48th percentile - higher than 48% of all known CVEs
Summary
The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered.
Risk Assessment
The disclosure of the admin panel URL may lead to unauthorized access to the admin panel, posing a serious security threat to the site.
Recommendation
It is recommended to update the Protect WP Admin plugin to version 4.0 or later to mitigate this vulnerability.
Original NVD description (English source)
The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered.