CVE-2020-28039 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Insufficient validation |
| Description | is_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is considered protected. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1257 | wordpress | 5.5.1-1 | 5.5.3-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 03 Nov 2020 | ASA-202011-3 | AVG-1257 | wordpress | Critical | multiple issues |
| References |
|---|
https://github.com/WordPress/wordpress-develop/commit/d5ddd6d4be1bc9fd16b7796842e6fb26315705ad |