Lucene search

K
cvelistDebianCVELIST:CVE-2016-2221
HistoryMay 22, 2016 - 1:00 a.m.

CVE-2016-2221

2016-05-2201:00:00
debian
www.cve.org

7.7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.5%

Open redirect vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php in WordPress before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL that triggers incorrect hostname parsing, as demonstrated by an https:example.com URL.

7.7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.5%