Description In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF. Remediation References CVE-2017-9066 Related Vulnerabilities PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-1709) MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9414) Ruby Improper Authentication Vulnerability (CVE-2009-0642) WebLogic CVE-2020-14640 Vulnerability (CVE-2020-14640) WordPress Plugin Featured Content 'param' Parameter Cross-Site Scripting (0.0.1) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities CWE-918 CVE-2017-9066