CVE-2020-25286
In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the...
Original description
The description as published by the source.
In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public.
Affected packages
Bitnami
wordpress-multisite
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.4.2"}]}]
Bitnami
wordpress
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.4.2"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2020-25286 wordpress Fixed in: 5.4.2+dfsg1-1
References
- advisory core.trac.wordpress.org
- advisory wordpress.org
- web nvd.nist.gov