CVE-2020-28033

WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed

published October 31, 2020

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02582 · 85.1th percentile
Published
2020-10-31T00:59Z
EPSS history
Timeline
  • 31 OCT 00:59Z
    WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed
    cvelistv5