← All advisories

Unrated severityOSV Advisory· Published Dec 14, 2018· Updated Aug 5, 2024

CVE-2018-20152

CVE-2018-20152

Description

In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass intended restrictions on post types via crafted input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/WordPressOSV2 versions
4.9.8+ 1 more
- (no CPE)range: 4.9.8
- (no CPE)range: <4.9.9, >=5.0.0 <5.0.1
Package: https://wordpress.org/plugins/wordpress

Patches

Vulnerability mechanics

References

8

www.debian.org/security/2019/dsa-4401mitrevendor-advisoryx_refsource_DEBIAN
www.securityfocus.com/bid/106220mitrevdb-entryx_refsource_BID
codex.wordpress.org/Version_4.9.9mitrex_refsource_MISC
lists.debian.org/debian-lts-announce/2019/02/msg00019.htmlmitremailing-listx_refsource_MLIST
wordpress.org/news/2018/12/wordpress-5-0-1-security-release/mitrex_refsource_MISC
wordpress.org/support/wordpress-version/version-5-0-1/mitrex_refsource_MISC
wpvulndb.com/vulnerabilities/9170mitrex_refsource_MISC
www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.