The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Open redirect vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php in WordPress before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL that triggers incorrect hostname parsing, as demonstrated by an https:example.com URL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade wordpress | Feb 9, 2016 | Feb 8, 2016 |
| Freebsd | — | Upgrade zh-wordpress-zh_TWUpgrade wordpressUpgrade ja-wordpressUpgrade de-wordpressUpgrade ru-wordpressUpgrade zh-wordpress-zh_CN | Dec 10, 2025 | Mar 8, 2016 |
| Wordpress | — | Upgrade Wordpress to version 4.4.2 | May 16, 2017 | May 21, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub