CVE-2018-10101

Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.

We have discovered 523,234 live websites that are affected by CVE-2018-10101.

Run a Free Instant Scan



Affected Software

Product  WordPress
Category Content Management System
Vulnerable Domains523,234 live websites (6.55% of WordPress install base)
Vulnerable Versions
  • from 0 through 4.9.5
Vulnerable Versions Count949 versions ( 63% of all versions)



Details

  • Published - Apr 14, 2018
  • Updated - Aug 5, 2024

Website Distribution by Country

Number of websites using CVE-2018-10101
United States104,606 websites


Italy57,765 websites
Japan50,894 websites
Germany38,772 websites
Russia27,332 websites
France24,824 websites
GB19,573 websites
Netherlands15,088 websites
Poland12,430 websites
Spain11,206 websites

Website Distribution by TLD

Number of websites using CVE-2018-10101
.com195,929 websites
.it38,579 websites
.ru22,852 websites
.de20,226 websites
.org19,631 websites
.net17,338 websites
.nl12,110 websites
.jp11,996 websites
.co.uk11,473 websites
.fr9,883 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2018-10101

Top websites that are affected by CVE-2018-10101. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.br Brazil***
*******.com United States*,***
*****.com United States*,***
********.com United States*,***
************.org United States*,***
******.com France*,***
*****.****.br Brazil*,***
*******.org United States*,***
********.****.br Brazil*,***
*********.io Netherlands*,***
See full domain list

FAQ

A total of 523,234 websites have been identified as vulnerable to CVE-2018-10101, based on global website indexing conducted by WebTechSurvey.
The WordPress is affected by the CVE-2018-10101 vulnerability.
WordPress versions up to and including 4.9.5 are vulnerable to CVE-2018-10101.