CVE-2020-28039: Critical severity wordpress vulnerability
isprotectedmeta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is considered protected.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-28039?
CVE-2020-28039 is a vulnerability in WordPress before version 5.5.2 that allows arbitrary file deletion due to improper determination of protected meta keys.
How severe is CVE-2020-28039?
CVE-2020-28039 has a severity rating of 9.1 (critical).
How does CVE-2020-28039 affect WordPress?
CVE-2020-28039 affects WordPress versions before 5.5.2.
How can I fix CVE-2020-28039?
To fix CVE-2020-28039, you should update your WordPress installation to version 5.5.2 or later.
Where can I find more information about CVE-2020-28039?
You can find more information about CVE-2020-28039 in the following references: [Reference 1](https://github.com/WordPress/wordpress-develop/commit/d5ddd6d4be1bc9fd16b7796842e6fb26315705ad), [Reference 2](https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/), [Reference 3](https://wpscan.com/vulnerability/10452).