CVE-2024-37881
Medium
Description
SiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php and implements a measure to avoid redirection from other URLs. However, SiteGuard WP Plugin versions prior to 1.7.7 missed to implement a measure to avoid redirection from wp-register.php. As a result, the customized path to the login page may be exposed.
SeverityMedium
CVSS5.3
Exploit probability68. percentile1.2%
Product
SiteGuard WP Plugin
PublishedJun 19, 2024
First seenJun 19, 2024
Weakness typeCWE-601Open redirectCWE-201CWE-201
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| EG Secure Solutions Inc. SiteGuard WP Plugin | prior to 1.7.7 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.