# CVEs published 2018-04-14

8 CVEs were published on April 14, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-10111](https://cve.now/CVE-2018-10111.md): An issue was discovered in GEGL through 0.3.32. (no CVSS)
- [CVE-2018-10112](https://cve.now/CVE-2018-10112.md): An issue was discovered in GEGL through 0.3.32. (no CVSS)
- [CVE-2018-10113](https://cve.now/CVE-2018-10113.md): An issue was discovered in GEGL through 0.3.32. (no CVSS)
- [CVE-2018-10114](https://cve.now/CVE-2018-10114.md): An issue was discovered in GEGL through 0.3.32. (no CVSS)
- [CVE-2018-10100](https://cve.now/CVE-2018-10100.md): Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS. (no CVSS)
- [CVE-2018-10101](https://cve.now/CVE-2018-10101.md): Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server. (no CVSS)
- [CVE-2018-10102](https://cve.now/CVE-2018-10102.md): Before WordPress 4.9.5, the version string was not escaped in the get\_the\_generator function, and could lead to XSS in a generator tag. (no CVSS)
- [CVE-2018-10109](https://cve.now/CVE-2018-10109.md): Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content secti (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-04-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.