46 matches found
CVE-2020-28039
isprotectedmeta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is considered protected...
Arbitrary file deletion
isprotectedmeta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is considered protected...
UBUNTU-CVE-2020-28039
isprotectedmeta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is considered protected...
CVE-2020-28039
CVE-2020-28039 affects WordPress core, specifically is_protected_meta in wp-includes/meta.php. WordPress versions prior to 5.5.2 are vulnerable due to an incorrect determination of whether a meta key is protected, which allows arbitrary file deletion. The issue is addressed in WordPress 5.5.2 (se...