CVE-2020-28040 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Cross-site request forgery |
| Description | WordPress before 5.5.2 allows CSRF attacks that change a theme's background image. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1257 | wordpress | 5.5.1-1 | 5.5.3-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 03 Nov 2020 | ASA-202011-3 | AVG-1257 | wordpress | Critical | multiple issues |
| References |
|---|
https://blog.wpscan.com/2020/10/30/wordpress-5.5.2-security-release.html https://github.com/WordPress/wordpress-develop/commit/69e832398254b7f47d137afaed40ff186015a71b |