CVE-2016-2221
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.4%
Open redirect vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php in WordPress before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL that triggers incorrect hostname parsing, as demonstrated by an https:example.com URL.
Produtos afetados
n/a · n/aReferências
https://codex.wordpress.org/Version_4.4.2https://core.trac.wordpress.org/changeset/36444https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/https://wpvulndb.com/vulnerabilities/8377http://www.debian.org/security/2016/dsa-3472http://www.securityfocus.com/bid/82463http://www.securitytracker.com/id/1034933