WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-10-31T00:59:45

Updated: 2024-08-04T16:33:56.879Z

Reserved: 2020-10-31T00:00:00

Link: CVE-2020-28033

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-11-02T21:15:30.727

Modified: 2024-11-21T05:22:14.623

Link: CVE-2020-28033

cve-icon Redhat

No data.