Description

wp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain privileges by using XML-RPC to comment on a post.

Remediation

References

CVE-2020-28036

Related Vulnerabilities

MySQL CVE-2018-3251 Vulnerability (CVE-2018-3251)

e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0457)

Oracle HTTP Server Exposure of Resource to Wrong Sphere Vulnerability (CVE-2022-25236)

WordPress Plugin MPL-Publisher-Create your Ebook & Audiobook Cross-Site Scripting (1.30.2)

WordPress Plugin WooCommerce Cross-Site Scripting (2.0.17)

Severity

Critical

Classification

CVE-2020-28036 CWE-269 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities