Description
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.
Remediation
References
Related Vulnerabilities
WordPress Plugin Homepage SlideShow Arbitrary File Upload (2.3)
WordPress Plugin iQ Block Country Cross-Site Scripting (1.1.19)
MySQL CVE-2021-2048 Vulnerability (CVE-2021-2048)
WordPress Plugin User Profile Picture Information Disclosure (2.4.0)
WordPress Plugin Qwizcards-online quizzes and flashcards Cross-Site Scripting (3.61)