EASY Bypass of plugin –

Hello,
I posted a week or so ago about someone bypassing the plugin and we discussed a bit and decided to wait for more info. I read the recent post of Mark about using dummy wp-login.php files…. but I also noticed something in my website’s logs that triggered a test…

1. take any URL from a site using the plugin
2. append it with //wp-login.php (that’s TWO slash marks)
3. and you’re brought to the login page.

Mark’s fix does not address this. I tested on a couple of my sites and it was consistent. I hope this can be fixed quickly as that seems to be how hackers are still able to locate my site. Thanks,
david

http://wordpress.org/plugins/rename-wp-login/