WordPress 2.9.2-4.8.1 - Open Redirect



Description
An open redirect was discovered on the user and term edit screens. Reported by Yasin Soliman (ysx).

Affects WordPresses

fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.7.6
fixed in version 4.7.6
fixed in version 4.7.6
fixed in version 4.7.6
fixed in version 4.7.6
fixed in version 4.7.6
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.6.7
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.5.10
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.4.11
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 3.9.20
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.3.12
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.2.16
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.1.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 4.0.19
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.9.20
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.8.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 3.7.22
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2
fixed in version 4.8.2

References

CVE 2017-14725
URL https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
URL https://core.trac.wordpress.org/changeset/41398

Classification

Type REDIRECT
CWE CWE-601

Miscellaneous

Submitter alykode
Views 9368
Verified No
WPVDB ID 8910

Timeline

Publicly Published 2017-09-20 (almost 2 years ago)
Added 2017-09-25 (almost 2 years ago)
Last Updated 2018-08-29 (about 1 year ago)

Our Other Services

Online WordPress Vulnerability Scanner WPScan WordPress Security Plugin