PT-2020-16064 · WordPress · Wordpress

·

CVE-2020-25286

·

Published

2020-06-23

·

Updated

2024-03-06

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 5.4.2
Description In WordPress, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public. This issue is related to the comment-template.php file in the wp-includes directory.
Recommendations For versions prior to 5.4.2, update to version 5.4.2 or later to resolve the issue.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

BIT-WORDPRESS-2020-25286
BIT-WORDPRESS-MULTISITE-2020-25286
CVE-2020-25286
DLA-2371-1
DSA-4709-1

Affected Products

Wordpress