CVE-2022-1589: 
WordPress vulnerability analysis and mitigation

The Change wp-admin Login WordPress plugin versions prior to 1.1.0 contains a vulnerability identified as CVE-2022-1589. The vulnerability was discovered and publicly disclosed on May 9, 2022. This security issue affects the plugin's settings update functionality, where the plugin fails to properly implement authorization checks and CSRF protections (WPScan).

The vulnerability is classified as an Incorrect Authorization issue (CWE-863) with a CVSS score of 6.5 (medium severity). The security flaw stems from missing authorization checks and CSRF protections when updating the plugin's settings. This affects versions 1.0.8 through 1.1.0 of the change-wp-admin-login plugin (WPScan).

The vulnerability allows unauthenticated users to modify the plugin's settings without proper authorization. This could potentially lead to unauthorized changes in the WordPress admin login configuration, affecting the security and accessibility of the WordPress admin interface (WPScan).

The vulnerability can be exploited through two vectors: direct unauthorized access to the settings update functionality and through CSRF attacks. Proof of concept exploits have been documented using curl commands to manipulate the plugin's settings via the WordPress admin-ajax.php endpoint (WPScan).

The vulnerability has been fixed in version 1.1.0 of the Change wp-admin Login plugin. Users are advised to update to this version or later to protect against potential exploitation (WPScan).