Exploit for Change WP Admin < 1.1.4 - Secret Login Page Disclosure CVE-2023-3604

Name: Exploit for Change WP Admin < 1.1.4 - Secret Login Page Disclosure CVE-2023-3604
Rating: 5 (51 reviews)

2023-07-27 | CVSS 5.0

## https://sploitus.com/exploit?id=WPEX-ID:8F6615E8-F607-4CE4-A0E0-D5FC841EAD16
- Set custom Login URL under "Settings > Permalinks". For example, `login`
- As an unauthenticated visitor, open https://example.com/wp-admin/customize.php in a different browser
- It will redirect to the login page: https://example.com/login/?redirect_to=https%3A%2F%2Fexample.com%2Fwp-admin%2Fcustomize.php&reauth=1