CVE-2018-10100

Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS.

Date published : 2018-04-14

https://codex.wordpress.org/Version_4.9.5

https://core.trac.wordpress.org/changeset/42892