WordPress version 4.4.1 and previous are vulnerable to an open redirection attack.
A open redirect is a vulnerability which can be used to get access without having the proper authorization. This vulnerability can be used in phishing attacks.
https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/
This vulnerability affects the following application versions:
- WordPress 2.3
- WordPress 2.3.1
- WordPress 2.3.2
- WordPress 2.3.3
- WordPress 2.5
- WordPress 2.5.1
- WordPress 2.6
- WordPress 2.6.1
- WordPress 2.6.2
- WordPress 2.6.3
- WordPress 2.6.5
- WordPress 2.7
- WordPress 2.7.1
- WordPress 2.8
- WordPress 2.8.1
- WordPress 2.8.2
- WordPress 2.8.3
- WordPress 2.8.4
- WordPress 2.8.5
- WordPress 2.8.6
- WordPress 2.9
- WordPress 2.9.1
- WordPress 2.9.2
- WordPress 3.0
- WordPress 3.0.1
- WordPress 3.0.2
- WordPress 3.0.3
- WordPress 3.0.4
- WordPress 3.0.5
- WordPress 3.0.6
- WordPress 3.1
- WordPress 3.1.1
- WordPress 3.1.2
- WordPress 3.1.3
- WordPress 3.1.4
- WordPress 3.2
- WordPress 3.2.1
- WordPress 3.3
- WordPress 3.3.1
- WordPress 3.3.2
- WordPress 3.3.3
- WordPress 3.4
- WordPress 3.4.1
- WordPress 3.4.2
- WordPress 3.5
- WordPress 3.5.1
- WordPress 3.5.2
- WordPress 3.6
- WordPress 3.6.1
- WordPress 3.7
- WordPress 3.7.1
- WordPress 3.7.2
- WordPress 3.7.3
- WordPress 3.8
- WordPress 3.8.1
- WordPress 3.8.2
- WordPress 3.8.3
- WordPress 3.9
- WordPress 3.9.1
- WordPress 3.9.2
- WordPress 3.9.3
- WordPress 3.9.4
- WordPress 3.9.5
- WordPress 3.9.6
- WordPress 3.9.7
- WordPress 3.9.8
- WordPress 3.9.9
- WordPress 3.9.10
- WordPress 4.0
- WordPress 4.0.1
- WordPress 4.0.2
- WordPress 4.0.3
- WordPress 4.0.4
- WordPress 4.0.5
- WordPress 4.0.6
- WordPress 4.0.7
- WordPress 4.0.8
- WordPress 4.0.9
- WordPress 4.1
- WordPress 4.1.1
- WordPress 4.1.2
- WordPress 4.1.3
- WordPress 4.1.4
- WordPress 4.1.5
- WordPress 4.1.6
- WordPress 4.1.7
- WordPress 4.1.8
- WordPress 4.1.9
- WordPress 4.2
- WordPress 4.2.1
- WordPress 4.2.2
- WordPress 4.2.3
- WordPress 4.2.4
- WordPress 4.2.5
- WordPress 4.2.6
- WordPress 4.3
- WordPress 4.3.1
- WordPress 4.3.2
- WordPress 4.4
- WordPress 4.4.1