CVE-2020-28040

WordPress before 5.5.2 allows CSRF attacks that change a theme's background image...