The Protect WP Admin WordPress plugin before version 4.0 disclosed the URL of the admin panel through the redirection of a crafted URL, bypassing the protection offered.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view