Количество 5
Количество 5
CVE-2020-28037
is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation).
CVE-2020-28037
is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation).
CVE-2020-28037
is_blog_installed in wp-includes/functions.php in WordPress before 5.5 ...
GHSA-h2pj-w259-mfcv
is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation).
BDU:2021-01738
Уязвимость функции is_blog_installed (wp-includes/functions.php) системы управления содержимым сайта WordPress, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-28037 is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation). | CVSS3: 9.8 | 13% Средний | больше 4 лет назад |
 | CVE-2020-28037 is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation). | CVSS3: 9.8 | 13% Средний | больше 4 лет назад |
| CVE-2020-28037 is_blog_installed in wp-includes/functions.php in WordPress before 5.5 ... | CVSS3: 9.8 | 13% Средний | больше 4 лет назад |
| GHSA-h2pj-w259-mfcv is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation). | CVSS3: 9.8 | 13% Средний | около 3 лет назад |
 | BDU:2021-01738 Уязвимость функции is_blog_installed (wp-includes/functions.php) системы управления содержимым сайта WordPress, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 9.8 | 13% Средний | больше 4 лет назад |
Уязвимостей на страницу