Security Advisory

CVE-2020-28036

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-10-31 00:59:28

Last updated 2024-08-04 16:33:56

Assigner mitre

State PUBLISHED

wp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain privileges by using XML-RPC to comment on a post.