CVE-2026-2301

The Post Duplicator plugin for WordPress is vulnerable to unauthorized arbitrary protected post meta insertion in all versions up to, and including, 3.0.8. This is due to the duplicatepost function in includes/api.php using $wpdb-insert directly to the wppostmeta table instead of WordPress's...

Linux Distros Unpatched Vulnerability : CVE-2020-28039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - isprotectedmeta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is...

PT-2020-5777 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.5.2 Description: The issue is related to the is protected meta function in the wp-includes/meta.php component of the WordPress content management system. This function incorrectly determines the protection status...