PT-2018-9681

CVE-2018-10100

Published

2018-04-14

Updated

2018-05-18

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 4.9.5

Description: The issue concerns the login page's redirection URL, which was not properly validated or sanitized when forced to use HTTPS.

Recommendations: For versions prior to 4.9.5, update to version 4.9.5 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

DLA-1366-1

DSA-4193-1

Found an issue in the description? Have something to add? Feel free to write us 👾