Description Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS. Remediation References CVE-2018-10100 Related Vulnerabilities Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2641) Oracle JRE CVE-2021-2369 Vulnerability (CVE-2021-2369) Joomla URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-23754) Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-58153) MySQL CVE-2012-1702 Vulnerability (CVE-2012-1702) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-601 CVE-2018-10100