Lucene search

K
patchstackN/APATCHSTACK:C31E61B259DD35F371348DF9C492D5AF
HistoryFeb 04, 2016 - 12:00 a.m.

WordPress <= 4.4.1 - Open Redirect

2016-02-0400:00:00
N/A
patchstack.com
10

0.006 Low

EPSS

Percentile

79.5%

This vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL which triggers incorrect hostname parsing.

Solution

           Update WordPress. 
CPENameOperatorVersion
wordpressle4.4.1

0.006 Low

EPSS

Percentile

79.5%