WordPress Vulnerabilities

WordPress 3.7-4.4.1 - Open Redirect

Affects WordPress

3.8.1
Fixed in WordPress 3.8.13
3.8
Fixed in WordPress 3.8.13
3.7.1
Fixed in WordPress 3.7.13
3.9
Fixed in WordPress 3.9.11
3.9.1
Fixed in WordPress 3.9.11
3.7
Fixed in WordPress 3.7.13
3.8.2
Fixed in WordPress 3.8.13
3.8.3
Fixed in WordPress 3.8.13
3.9.2
Fixed in WordPress 3.9.11
4.0
Fixed in WordPress 4.0.10
4.1
Fixed in WordPress 4.1.10
4.1.1
Fixed in WordPress 4.1.10
4.2
Fixed in WordPress 4.2.7
3.9.3
Fixed in WordPress 3.9.11
4.1.2
Fixed in WordPress 4.1.10
4.2.1
Fixed in WordPress 4.2.7
4.0.1
Fixed in WordPress 4.0.10
4.1.5
Fixed in WordPress 4.1.10
4.1.4
Fixed in WordPress 4.1.10
4.1.3
Fixed in WordPress 4.1.10
3.8.4
Fixed in WordPress 3.8.13
3.7.4
Fixed in WordPress 3.7.13
4.2.3
Fixed in WordPress 4.2.7
3.8.8
Fixed in WordPress 3.8.13
3.8.5
Fixed in WordPress 3.8.13
3.8.6
Fixed in WordPress 3.8.13
3.8.7
Fixed in WordPress 3.8.13
3.7.2
Fixed in WordPress 3.7.13
3.7.3
Fixed in WordPress 3.7.13
3.7.5
Fixed in WordPress 3.7.13
3.7.6
Fixed in WordPress 3.7.13
3.7.7
Fixed in WordPress 3.7.13
3.7.8
Fixed in WordPress 3.7.13
3.7.9
Fixed in WordPress 3.7.13
3.8.9
Fixed in WordPress 3.8.13
3.9.4
Fixed in WordPress 3.9.11
3.9.5
Fixed in WordPress 3.9.11
3.9.6
Fixed in WordPress 3.9.11
3.9.7
Fixed in WordPress 3.9.11
4.0.2
Fixed in WordPress 4.0.10
4.0.3
Fixed in WordPress 4.0.10
4.0.4
Fixed in WordPress 4.0.10
4.0.5
Fixed in WordPress 4.0.10
4.0.6
Fixed in WordPress 4.0.10
4.1.6
Fixed in WordPress 4.1.10
4.2.2
Fixed in WordPress 4.2.7
4.2.4
Fixed in WordPress 4.2.7
4.1.7
Fixed in WordPress 4.1.10
4.0.7
Fixed in WordPress 4.0.10
3.9.8
Fixed in WordPress 3.9.11
3.8.10
Fixed in WordPress 3.8.13
3.7.10
Fixed in WordPress 3.7.13
4.3
Fixed in WordPress 4.3.3
4.3.1
Fixed in WordPress 4.3.3
4.2.5
Fixed in WordPress 4.2.7
4.1.8
Fixed in WordPress 4.1.10
4.0.8
Fixed in WordPress 4.0.10
3.9.9
Fixed in WordPress 3.9.11
3.8.11
Fixed in WordPress 3.8.13
3.7.11
Fixed in WordPress 3.7.13
4.4
Fixed in WordPress 4.4.2
3.7.12
Fixed in WordPress 3.7.13
3.8.12
Fixed in WordPress 3.8.13
3.9.10
Fixed in WordPress 3.9.11
4.0.9
Fixed in WordPress 4.0.10
4.1.9
Fixed in WordPress 4.1.10
4.2.6
Fixed in WordPress 4.2.7
4.3.2
Fixed in WordPress 4.3.3
4.4.1
Fixed in WordPress 4.4.2

References

CVE
CVE-2016-2221
URL
https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/
URL
https://core.trac.wordpress.org/changeset/36444

Classification

Type
REDIRECT
OWASP top 10
A1: Injection
CWE
CWE-601
CVSS
7.4 (high)

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
8fba3ea1-553c-4426-ad00-03cc258bff3f

Timeline

Publicly Published
2016-02-02 (about 8 years ago)
Added
2016-02-02 (about 8 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2023-10-25
Title
Parcel Pro < 1.6.12 - Open Redirect
Published
2016-06-21
Title
WordPress 4.5.2 - Redirect Bypass
Published
2015-06-05
Title
Freshdesk Support < 1.8 - Open Redirect
Published
2023-10-12
Title
Responsive Column Widgets <= 1.2.7 - Open Redirect via responsive_column_widgets_link
Published
2024-01-03
Title
WordPress Toolbar <= 2.2.6 - Open Redirect