Login in wordpress comments and hide desktop

If we have the option Hide desktop activated in Ithemes and we change for example the wp-admin for any other, for example “enter”.
In the wordpress comments if we activate the option to connect to be able to publish comments and we are disconnected, when trying to connect instead of sending us to my_web.com/wp-admin giving an error by directory not accessible or not available, it sends me to the directory my_web .com / enter revealing which is my access directory with the administrator.
This directory should be exclusive to the administrator, having to access it by typing the url and not as a link that any application can access.
The other applications would have to enter my_web.com/wp-admin or login directly, but never my_web.com/ login.

This is a major security flaw and a possible door to hacking since any application can access the secret word.
With this failure the option to hide desktop is not valid as long as it is not fixed as it is a serious failure.

Greetings and thank you.