CVE-2020-11030

score

<0.1

cvss

6.4

epss

1.4%

published

2020-04-30

kev added

—

first seen

2026-10-21

WordPress versions prior to 5.4.1 contain a stored cross-site scripting caused by crafted payloads in the search block of the block editor, letting authenticated users execute scripts, exploit requires user to have content creation capabilities.