Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to     use HTTPS. (CVE-2018-10100)

Note that Nessus relies on the presence of the package as reported by the vendor.

Several vulnerabilities were discovered in wordpress, a web blogging tool, which could allow remote attackers to compromise a site via cross-site scripting, bypass restrictions or unsafe redirects. More information can be found in the upstream advisory at https://wordpress.org/news/2018/04/wordpress-4-9-5-security-and-mainte nance-release/

Two vulnerabilities were discovered in wordpress, a web blogging tool.
The Common Vulnerabilities and Exposures project identifies the following issues.

CVE-2018-10100

The redirection URL for the login page was not validated or sanitized if forced to use HTTPS.

CVE-2018-10102

The version string was not escaped in the get_the_generator function, and could lead to cross-site scripting (XSS) in a generator tag.

For Debian 7 'Wheezy', these problems have been fixed in version 3.6.1+dfsg-1~deb7u21.

We recommend that you upgrade your wordpress packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
258362	Linux Distros Unpatched Vulnerability : CVE-2018-10100	Nessus	Misc.	medium
109588	Debian DSA-4193-1 : wordpress - security update	Nessus	Debian Local Security Checks	medium
109407	Debian DLA-1366-1 : wordpress security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2018-10100

medium

Tenable Plugins

medium

medium

medium