CVE-2020-25286

score

<0.1

cvss

5.3

epss

1.9%

published

2020-09-13

kev added

—

first seen

2026-10-21

WordPress before 5.4.2 contains an information disclosure caused by comments from non-public posts or pages appearing in latest comments, letting unauthorized users view comments, exploit requires access to the site with comment viewing permissions.