CVE-2020-28033

HIGH · CVSS 7.5 EPSS 2.65%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-28033

Severity

HIGH

CVSS

7.5

EPSS

2.65%

WordPress

WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed.