{"answers":{"affected":"","exploited":"It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-37881 exists.","fix":"No fix has been published for CVE-2024-37881 yet. Limit exposure of the affected software until one is available.","what":"CVE-2024-37881 is a medium-severity vulnerability in SiteGuard WP Plugin, published on 19 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2024-37881 and fix it if it is affected.\n\nWhat it is: CVE-2024-37881 is a medium-severity vulnerability in SiteGuard WP Plugin, published on 19 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-37881 exists.\n\nAffected product: SiteGuard WP Plugin. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2024-37881/ (Markdown: https://insights.sbomify.com/CVE-2024-37881/index.md)","id":"CVE-2024-37881","markdown":"https://insights.sbomify.com/CVE-2024-37881/index.md","name":"CVE-2024-37881","record":{"aliases":["GHSA-jcmc-rcp5-r722"],"analysis":{"component_type":"cms_plugin","fix_type":"upgrade","impacts":["data_read"],"network_reachable":"yes","non_default_config":true,"product_category":"WordPress plugin","requires_auth":"none","summary":"An attacker can discover the customized login URL by accessing the registration page, exposing the hidden login path.","user_interaction":"not_required","vuln_class":"information_disclosure"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"jpcert","cpe":[],"cvss":{"score":5.3,"severity":"medium","source":"cisa-adp","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"cwes":[{"id":"CWE-601","name":"URL Redirection to Untrusted Site"},{"id":"CWE-201","name":"Insertion of Sensitive Information Into Sent Data"}],"description":"SiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php and implements a measure to avoid redirection from other URLs. However, SiteGuard WP Plugin versions prior to 1.7.7 missed to implement a measure to avoid redirection from wp-register.php. As a result, the customized path to the login page may be exposed.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":1,"refs":[{"date":null,"kind":"nuclei","ref":"http/cves/2024/CVE-2024-37881.yaml","stars":null,"title":"SiteGuard WP Plugin \u003c= 1.7.6 - Login Page Disclosure"}],"tier":"weaponised"},"has_fix":null,"headline":"Information disclosure in SiteGuard WP Plugin","id":"CVE-2024-37881","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"information_disclosure","year":"2024"},"n_packages":0,"n_references":3,"next":{"headline":"Nextcloud Server can reshare read\u0026share only folder with more permissions","id":"CVE-2024-37882"},"packages":[],"prev":{"headline":"Information disclosure in n/a","id":"CVE-2024-37880"},"products":["SiteGuard WP Plugin"],"published":"2024-06-19","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"},{"class":"attribution","licence":"MIT","name":"Nuclei templates"}],"ssvc":{"automatable":"yes","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2024-08-02","vendors":["EG Secure Solutions Inc."]},"summary":"An attacker can discover the customized login URL by accessing the registration page, exposing the hidden login path.","url":"https://insights.sbomify.com/CVE-2024-37881/"}