{"api_version":"1","generated_at":"2026-07-23T09:44:06+00:00","cve":"CVE-2020-4050","urls":{"html":"https://cve.report/CVE-2020-4050","api":"https://cve.report/api/cve/CVE-2020-4050.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-4050","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-4050"},"summary":{"title":"CVE-2020-4050","description":"In affected versions of WordPress, misuse of the `set-screen-option` filter's return value allows arbitrary user meta fields to be saved. It does require an admin to install a plugin that would misuse the filter. Once installed, it can be leveraged by low privileged users. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).","state":"PUBLIC","assigner":"security-advisories@github.com","published_at":"2020-06-12 16:15:00","updated_at":"2023-11-07 03:23:00"},"problem_types":["CWE-288"],"metrics":[],"references":[{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODNHXVJS25YVWYQHOCICXTLIN5UYJFDN/","name":"FEDORA-2020-8447a3e195","refsource":"FEDORA","tags":["Third Party Advisory"],"title":"[SECURITY] Fedora 32 Update: wordpress-5.4.2-1.fc32 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/773N2ZV7QEMBGKH6FBKI6Q5S3YJMW357/","name":"FEDORA-2020-bbedd29391","refsource":"","tags":[],"title":"[SECURITY] Fedora 31 Update: wordpress-5.4.2-1.fc31 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://wordpress.org/news/2020/06/wordpress-5-4-2-security-and-maintenance-release/","name":"https://wordpress.org/news/2020/06/wordpress-5-4-2-security-and-maintenance-release/","refsource":"MISC","tags":["Vendor Advisory"],"title":"News – WordPress 5.4.2 Security and Maintenance Release – WordPress.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00011.html","name":"[debian-lts-announce] 20200911 [SECURITY] [DLA 2371-1] wordpress security update","refsource":"MLIST","tags":[],"title":"[SECURITY] [DLA 2371-1] wordpress security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/773N2ZV7QEMBGKH6FBKI6Q5S3YJMW357/","name":"FEDORA-2020-bbedd29391","refsource":"FEDORA","tags":["Third Party Advisory"],"title":"[SECURITY] Fedora 31 Update: wordpress-5.4.2-1.fc31 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.debian.org/security/2020/dsa-4709","name":"DSA-4709","refsource":"DEBIAN","tags":[],"title":"Debian -- Security Information -- DSA-4709-1 wordpress","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00000.html","name":"[debian-lts-announce] 20200701 [SECURITY] [DLA 2269-1] wordpress security update","refsource":"MLIST","tags":[],"title":"[SECURITY] [DLA 2269-1] wordpress security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-4vpv-fgg2-gcqc","name":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-4vpv-fgg2-gcqc","refsource":"CONFIRM","tags":["Third Party Advisory"],"title":"WordPress: 'set-screen-option' filter misuse by plugins leading to privilege escalation · Advisory · WordPress/wordpress-develop · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODNHXVJS25YVWYQHOCICXTLIN5UYJFDN/","name":"FEDORA-2020-8447a3e195","refsource":"","tags":[],"title":"[SECURITY] Fedora 32 Update: wordpress-5.4.2-1.fc32 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/WordPress/wordpress-develop/commit/b8dea76b495f0072523106c6ec46b9ea0d2a0920","name":"https://github.com/WordPress/wordpress-develop/commit/b8dea76b495f0072523106c6ec46b9ea0d2a0920","refsource":"MISC","tags":["Patch","Third Party Advisory"],"title":"Administration: Add a new filter to extend set-screen-option. · WordPress/wordpress-develop@b8dea76 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-4050","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4050","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"4050","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"10.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4050","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4050","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4050","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"31","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4050","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"32","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4050","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"31","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4050","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"32","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4050","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4050","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"security-advisories@github.com","ID":"CVE-2020-4050","STATE":"PUBLIC","TITLE":"set-screen-option filter misuse by plugins leading to privilege escalation in WordPress"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"wordpress-develop","version":{"version_data":[{"version_value":">= 5.4.0, < 5.4.2"},{"version_value":">= 5.3.0, < 5.3.4"},{"version_value":">= 5.2.0, < 5.2.7"},{"version_value":">= 5.1.0, < 5.1.6"},{"version_value":">= 5.0.0, < 5.0.10"},{"version_value":">= 4.9.0, < 4.9.15"},{"version_value":">= 4.8.0, < 4.8.14"},{"version_value":">= 4.7.0, < 4.7.18"},{"version_value":">= 4.6.0, < 4.6.19"},{"version_value":">= 4.5.0, < 4.5.22"},{"version_value":">= 4.4.0, < 4.4.23"},{"version_value":">= 4.3.0, < 4.3.24"},{"version_value":">= 4.2.0, < 4.2.28"},{"version_value":">= 4.1.0, < 4.1.31"},{"version_value":">= 4.0.0, < 4.0.31"},{"version_value":">= 3.9.0, < 3.9.32"},{"version_value":">= 3.8.0, < 3.8.34"},{"version_value":">= 3.7.0, < 3.7.34"}]}}]},"vendor_name":"WordPress"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In affected versions of WordPress, misuse of the `set-screen-option` filter's return value allows arbitrary user meta fields to be saved. It does require an admin to install a plugin that would misuse the filter. Once installed, it can be leveraged by low privileged users. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34)."}]},"impact":{"cvss":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-288: Authentication Bypass Using an Alternate Path or Channel"}]}]},"references":{"reference_data":[{"name":"https://wordpress.org/news/2020/06/wordpress-5-4-2-security-and-maintenance-release/","refsource":"MISC","url":"https://wordpress.org/news/2020/06/wordpress-5-4-2-security-and-maintenance-release/"},{"name":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-4vpv-fgg2-gcqc","refsource":"CONFIRM","url":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-4vpv-fgg2-gcqc"},{"name":"https://github.com/WordPress/wordpress-develop/commit/b8dea76b495f0072523106c6ec46b9ea0d2a0920","refsource":"MISC","url":"https://github.com/WordPress/wordpress-develop/commit/b8dea76b495f0072523106c6ec46b9ea0d2a0920"},{"refsource":"FEDORA","name":"FEDORA-2020-8447a3e195","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODNHXVJS25YVWYQHOCICXTLIN5UYJFDN/"},{"refsource":"FEDORA","name":"FEDORA-2020-bbedd29391","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/773N2ZV7QEMBGKH6FBKI6Q5S3YJMW357/"},{"refsource":"DEBIAN","name":"DSA-4709","url":"https://www.debian.org/security/2020/dsa-4709"},{"refsource":"MLIST","name":"[debian-lts-announce] 20200701 [SECURITY] [DLA 2269-1] wordpress security update","url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00000.html"},{"refsource":"MLIST","name":"[debian-lts-announce] 20200911 [SECURITY] [DLA 2371-1] wordpress security update","url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00011.html"}]},"source":{"advisory":"GHSA-4vpv-fgg2-gcqc","discovery":"UNKNOWN"}},"nvd":{"publishedDate":"2020-06-12 16:15:00","lastModifiedDate":"2023-11-07 03:23:00","problem_types":["CWE-288"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW"},"exploitabilityScore":1.6,"impactScore":1.4},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6},"severity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7","versionEndExcluding":"3.7.34","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"3.8","versionEndExcluding":"3.8.34","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"3.9","versionEndExcluding":"3.9.32","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"4.0.31","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"4.1.31","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"4.2.28","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"4.3.24","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4","versionEndExcluding":"4.4.23","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"4.5","versionEndExcluding":"4.5.22","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"4.6","versionEndExcluding":"4.6.19","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"4.7","versionEndExcluding":"4.7.18","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"4.8","versionEndExcluding":"4.8.14","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"4.9.15","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.0.10","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1","versionEndExcluding":"5.1.6","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2","versionEndExcluding":"5.2.7","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.3.4","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4","versionEndExcluding":"5.4.2","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"4050","Ordinal":"164043","Title":"CVE-2020-4050","CVE":"CVE-2020-4050","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"4050","Ordinal":"1","NoteData":"In affected versions of WordPress, misuse of the `set-screen-option` filter's return value allows arbitrary user meta fields to be saved. It does require an admin to install a plugin that would misuse the filter. Once installed, it can be leveraged by low privileged users. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).","Type":"Description","Title":null},{"CveYear":"2020","CveId":"4050","Ordinal":"2","NoteData":"2020-06-12","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"4050","Ordinal":"3","NoteData":"2020-09-11","Type":"Other","Title":"Modified"}]}}}