CVE-2020-28032: Critical severity wordpress vulnerability
WordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredIterator.php.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-28032?
CVE-2020-28032 is a vulnerability in WordPress versions before 5.5.2 that mishandles deserialization requests in wp-includes/Requests/Utility/FilteredIterator.php.
How severe is CVE-2020-28032?
CVE-2020-28032 has a severity score of 9.8, which is considered critical.
Which software versions are affected by CVE-2020-28032?
WordPress versions 5.0.15+dfsg1-0+deb10u1, 5.0.19+dfsg1-0+deb10u1, 5.7.8+dfsg1-0+deb11u2, 6.1.1+dfsg1-1, and 6.3.1+dfsg1-1 are affected by CVE-2020-28032.
How do I fix CVE-2020-28032?
To fix CVE-2020-28032, upgrade your WordPress installation to version 5.5.2 or later.
Where can I find more information about CVE-2020-28032?
You can find more information about CVE-2020-28032 at the following references: [GitHub](https://github.com/WordPress/wordpress-develop/commit/add6bedf3a53b647d0ebda2970057912d3cd79d3), [WordPress.org](https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/), [WPScan](https://wpscan.com/vulnerability/10446).