FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

wordpress -- multiple issues

Affected packages
fr-wordpress < 4.9.5,1
wordpress < 4.9.5,1
de-wordpress < 4.9.5
ja-wordpress < 4.9.5
zh_CN-wordpress < 4.9.5
zh_TW-wordpress < 4.9.5

Details

VuXML ID be38245e-44d9-11e8-a292-00e04c1ea73d
Discovery 2018-04-03
Entry 2018-04-20

wordpress developers reports:

Don't treat localhost as same host by default.

Use safe redirects when redirecting the login page if SSL is forced.

Make sure the version string is correctly escaped for use in generator tags.

References

URL https://wordpress.org/news/2018/04/wordpress-4-9-5-security-and-maintenance-release/