Unscored DLA-1366-1 2 CVEs

wordpress - security update

Published Apr 27, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	wordpress	3.6.1+dfsg-1~deb7u21

Vulnerabilities 2

Unscored —

CVE-2018-10100

Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS.

wordpress wordpress Debian Ubuntu

Apr 14, 2018
Unscored —

CVE-2018-10102

Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in …

wordpress wordpress Debian Ubuntu

Apr 14, 2018