Debian DSA-4193-1 : wordpress - security update

Several vulnerabilities were discovered in wordpress, a web blogging tool, which could allow remote attackers to compromise a site via cross-site scripting, bypass restrictions or unsafe redirects. More information can be found in the upstream advisory at...

UBUNTU-CVE-2018-10101

Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...

CVE-2018-10101

CVE-2018-10101 affects WordPress up to version 4.9.4 where the URL validator incorrectly treated localhost hostnames as being on the same host as the WordPress server. This misclassification could enable a vulnerability scenario described across connected docs. Upgrading to WordPress 4.9.5 or lat...