| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress | < 4.9.5 | 4.9.5 |
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free