is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation).
Max Base Score | 9.8 |
Published | 2020-11-02 |
Updated | 2022-04-28 |
EPSS | 3.27% |
1 vulnerabilities found