Pular para o conteúdo
Ver todas as ameaças

CVE-2020-4050

Alvo: Não informado

Descrição

In affected versions of WordPress, misuse of the `set-screen-option` filter’s return value allows arbitrary user meta fields to be saved. It does require an admin to install a plugin that would misuse the filter. Once installed, it can be leveraged by low privileged users. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).

Software
Não informado
Tipo Software
Plugin
CVE
CVE-2020-4050
Tags
Nâo informado
Data de publicação
12/06/2020
Última atualização
08/11/2023
Pontuação em CVSS 3.0
3.1
Baixo
plugins premium WordPress