WordPress Vulnerabilities
WordPress < 5.5.2 - Hardening Deserialization Requests
Description
The release notes state:
"Props to Alex Concha of the WordPress Security Team for their work in hardening deserialization requests."
This vulnerability affected the third-party "Requests for PHP" library used by WordPress.
Affects WordPress
Fixed in WordPress 5.5.2 References
CVE
Classification
Type
OBJECT INJECTION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Alex Concha of the WordPress Security Team
Verified
No
WPVDB ID
Timeline
Publicly Published
2020-10-29 (about 3 years ago)
Added
2020-10-29 (about 3 years ago)
Last Updated
2021-04-29 (about 3 years ago)
WPScan 