CVE Database · CVE-2018-10101
CVSS v3.1
N/A
EPSS
3.26%
Published
Apr 16, 2018
Modified
Nov 21, 2024
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.
Weaknesses (CWE)
Affected Products (3)
References (16)
