QID 730641

WordPress is software designed for everyone, emphasizing accessibility, performance, security, and ease of use.

CVE-2020-11025: Authenticated users could corrupt JSON data in the Customizer of other users' to inject malicious JavaScript.
CVE-2020-11026: Authenticated users with the capability to upload files could upload files with specially crafted names containing utf8 characters to execute JavaScript when later viewed.
CVE-2020-11027: When a user requested a password reset link, but did not use it and instead reset their password by logging in, the password reset link would still be usable.
CVE-2020-11028: This could have allowed unauthenticated users to view private posts by manipulating time and date queries.
CVE-2020-11029: WordPress' Object Cache that caches data from the database did not validate or encode the cache key. If an attacker managed to inject a malicious cache key that was then output in a third party plugin, it could lead to XSS.
CVE-2020-11030: An authenticated user could customise the class of the search block, leading to Cross-Site Scripting (XSS).

Affected Versions:
WordPress versions Prior to 5.4.1

QID Detection Logic:
The QID checks for the version via the meta generator tag and also using Blind Elephant DB to fingerprint the version.

Successful exploitation of these vulnerabilities may allow an attacker to compromise victim account using password reset vulnerability or allow authenticated attackers to execute malicious JavaScript on the target system.