CVE-2020-25286

CVE-2020-25286

EPSS 1.9%

In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://core.trac.wordpress.org/changeset/47984 https://wordpress.org/news/2020/06/wordpress-5-4-2-security-and-maintenance-release/