CVE-2020-25286

In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2020-09-13

Last modified

2024-08-04

Affected products

• Wordpress (Wordpress)

References

• https://core.trac.wordpress.org/changeset/47984
• https://wordpress.org/news/2020/06/wordpress-5-4-2-security-and-maintenance-release/