Change WP URL WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Change WP URL plugin for WordPress, affecting all versions through 1.0. The issue arises from inadequate nonce validation on the 'change-wp-url' page, allowing unauthenticated attackers to alter the WP Login URL by sending a forged request, provided they can persuade a site administrator to click a link.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in the WP Login URL, potentially causing confusion or access issues for users.