Description
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.
Remediation
References
Related Vulnerabilities
Jenkins Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2024-43044)
Apache Tomcat Improper Handling of Exceptional Conditions Vulnerability (CVE-2017-5664)
Ruby on Rails Improper Input Validation Vulnerability (CVE-2014-0082)
Oracle Database Server CVE-2006-3701 Vulnerability (CVE-2006-3701)
Liferay DXP Incorrect Authorization Vulnerability (CVE-2024-25604)