Late last year a similar vulnerability was discovered that could turn third party blogs into a powerful port-scanning engine. The vulnerability CVE-2013-0235 was fixed in in Wordpress 3.5.1 by applying some filtering on allowed URLs.