CVE-2023-3604

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Aug 21, 2023
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-360417.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2023-360425.5Visual Studio Denial of Service VulnerabilityCVE-2023-360436.5Open Management Infrastructure Information Disclosure VulnerabilityCVE-2023-360457.8Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2023-360467.1Windows Authentication Denial of Service VulnerabilityCVE-2023-360477.8Windows Authentication Elevation of Privilege VulnerabilityCVE-2023-360499.8.NET, .NET Framework, and Visual Studio Elevation of Privilege VulnerabilityCVE-2023-36059.1A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an uCVE-2023-360508.0Microsoft Exchange Server Spoofing VulnerabilityCVE-2023-360528.6Azure CLI REST Command Information Disclosure VulnerabilityCVE-2023-360537.5In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regulaCVE-2023-360546.5lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authen
CVE-2023-3604: High severity, CVSS 7.5 | Vulnix