Related Vulnerabilities: CVE-2020-28032  

WordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredIterator.php.

Severity High

Remote Yes

Type Arbitrary code execution

Description

WordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredIterator.php.

AVG-1257 wordpress 5.5.1-1 5.5.3-1 Critical Fixed

03 Nov 2020 ASA-202011-3 AVG-1257 wordpress Critical multiple issues

https://github.com/WordPress/wordpress-develop/commit/add6bedf3a53b647d0ebda2970057912d3cd79d3