CVE-2020-11028

score

<0.1

cvss

5.8

epss

2.3%

published

2020-04-30

kev added

—

first seen

2026-10-21

WordPress versions prior to 5.4.1 contain an unauthenticated disclosure caused by private posts becoming accessible under specific conditions, letting attackers access sensitive content without authentication, exploit requires specific post state conditions.