EPSS
Percentile
69.7%
Because of these vulnerabilities, the attackers can make unauthorized edits or additions via a direct request to edit-category-form.php, edit-pages.php, edit-comments.php, edit-link-category-form.php, or edit.php.
Update WordPress.
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2854