Medium severity5.3NVD Advisory· Published Sep 13, 2020· Updated Jun 17, 2026
CVE-2020-25286
CVE-2020-25286
Description
In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*range: <5.4.2
- (no CPE)
- (no CPE)range: <5.4.2
- osv-coords2 versions
< 5.4.2+ 1 more
- (no CPE)range: < 5.4.2
- (no CPE)range: < 5.4.2
Patches
Vulnerability mechanics
References
2- core.trac.wordpress.org/changeset/47984nvdPatchVendor Advisory
- wordpress.org/news/2020/06/wordpress-5-4-2-security-and-maintenance-release/nvdVendor Advisory
News mentions
0No linked articles in our index yet.