CVE-2020-4050

score

<0.1

cvss

3.5

epss

1.4%

published

2020-06-12

kev added

—

first seen

2026-10-21

WordPress versions affected by misuse of the `set-screen-option` filter's return value allow arbitrary user meta fields to be saved, letting low privileged users modify user meta once an admin installs a malicious plugin, exploit requires plugin misuse.