{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-29T21:06:53.594","vulnerabilities":[{"cve":{"id":"CVE-2020-11028","sourceIdentifier":"security-advisories@github.com","published":"2020-04-30T23:15:11.683","lastModified":"2026-06-17T02:48:53.893","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In affected versions of WordPress, some private posts, which were previously public, can result in unauthenticated disclosure under a specific set of conditions. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33)."},{"lang":"es","value":"En las versiones afectadas de WordPress, algunas publicaciones privadas, que anteriormente eran públicas, pueden resultar en una divulgación no autenticada bajo un conjunto específico de condiciones. Esto ha sido corregido en la versión 5.4.1, junto con todas las versiones afectadas anteriormente mediante una versión menor (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33)."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"WordPress","product":"WordPress","versions":[{"version":">= 5.4.0, < 5.4.1","status":"affected"},{"version":">= 5.3.0, < 5.3.3","status":"affected"},{"version":">= 5.2.0, < 5.2.6","status":"affected"},{"version":">= 5.1.0, < 5.1.5","status":"affected"},{"version":">= 5.0.0, < 5.0.9","status":"affected"},{"version":">= 4.9.0, < 4.9.14","status":"affected"},{"version":">= 4.8.0, < 4.8.13","status":"affected"},{"version":">= 4.7.0, < 4.7.17","status":"affected"},{"version":">= 4.6.0, < 4.6.18","status":"affected"},{"version":">= 4.5.0, < 4.5.21","status":"affected"},{"version":">= 4.4.0, < 4.4.22","status":"affected"},{"version":">= 4.3.0, < 4.3.23","status":"affected"},{"version":">= 4.2.0, < 4.2.27","status":"affected"},{"version":">= 4.1.0, < 4.1.30","status":"affected"},{"version":">= 4.0.0, < 4.0.30","status":"affected"},{"version":">= 3.9.0, < 3.9.31","status":"affected"},{"version":">= 3.8.0, < 3.8.33","status":"affected"},{"version":">= 3.7.0, < 3.7.33","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.3,"impactScore":4.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndExcluding":"5.4.1","matchCriteriaId":"2E79CBDF-EE25-487C-8276-74F4928ECDFF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-xhx9-759f-6p2w","source":"security-advisories@github.com","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00011.html","source":"security-advisories@github.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://wordpress.org/support/wordpress-version/version-5-4-1/#security-updates","source":"security-advisories@github.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4677","source":"security-advisories@github.com","tags":["Third Party Advisory"]},{"url":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-xhx9-759f-6p2w","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://wordpress.org/support/wordpress-version/version-5-4-1/#security-updates","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}