Description
Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS.
Remediation
References
Related Vulnerabilities
MySQL CVE-2012-0116 Vulnerability (CVE-2012-0116)
WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.4)
WordPress Plugin Fancy Gallery Cross-Site Scripting (1.5.12)
WordPress Plugin Job Board Vanila Cross-Site Scripting (1.0)
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Security Bypass (2.0.15)