A vulnerability classified as critical was found in Jahid Hasan Admin login URL Change Plugin up to 1.1.5 on WordPress. This affects an unknown function. The manipulation results in missing authorization.

This vulnerability is identified as CVE-2026-24578. The attack can be executed remotely. There is not any exploit available.