Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27734
HistoryNov 03, 2020 - 4:47 a.m.

Remote Code Execution

2020-11-0304:47:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
wordpress vulnerability code execution denial of service installation status attacker

EPSS

0.022

Percentile

89.7%

wordpress is vulnerable to remote code execution. The installation status of Wordpress is not properly determined in is_blog_installed in wp-includes/functions.php. This could allow an attacker to perform a new installation which would result in remote code execution and denial of service in older installation.