CVE-2022-1589: unknown change wp-admin login Cross-Site Request Forgery (CSRF)
Vulnerability summary
CVE-2022-1589 is a high (CVSS 7.5) Cross-Site Request Forgery (CSRF) vulnerability in unknown change wp-admin login. EPSS estimates a 0.61% chance of exploitation in the next 30 days, higher than 48.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 30-05-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
The Change wp-admin login WordPress plugin before 1.1.0 does not properly check for authorisation and is also missing CSRF check when updating its settings, which could allow unauthenticated users to change the settings. The attacked could also be performed via a CSRF vector
CVSS metrics
3 scores · 2 sources · 2 versions- wordfenceSource5.4MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:NDiffers
EPSS trend
Probability
0.61%
Chance of exploitation in the next 30 days
Percentile
49%
Versus all other CVEs
30-day change
+0.01 pp
From 0.60% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (wpscan.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
- CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Affected systems
Unknown1 product
- change wp-admin login< 1.1.0
Wordpress1 product
- change-wp-admin-login≤ 1.0.9 (fixed in 1.1.0)
Wpexperts1 product
- all_in_one_login< 1.1.0
3 vendors · 3 products
References
2 links- wpscan.com/vulnerability/257f9e14-4f43-4852-8384-80c15d087633ExploitVDB EntryTechnical DescriptionThird Party Advisory