CVE-2020-4050

LowCVSS 3.1/10Last modified Jun 17, 2026

Description

In affected versions of WordPress, misuse of the `set-screen-option` filter's return value allows arbitrary user meta fields to be saved. It does require an admin to install a plugin that would misuse the filter. Once installed, it can be leveraged by low privileged users. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).

Metrics

CVSS 3.1 3.1/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-288

Affected software

VendorProductVersions
WordPresswordpress-develop>= 5.4.0, < 5.4.2; >= 5.3.0, < 5.3.4; >= 5.2.0, < 5.2.7; >= 5.1.0, < 5.1.6; >= 5.0.0, < 5.0.10; >= 4.9.0, < 4.9.15; >= 4.8.0, < 4.8.14; >= 4.7.0, < 4.7.18; >= 4.6.0, < 4.6.19; >= 4.5.0, < 4.5.22; >= 4.4.0, < 4.4.23; >= 4.3.0, < 4.3.24; >= 4.2.0, < 4.2.28; >= 4.1.0, < 4.1.31; >= 4.0.0, < 4.0.31; >= 3.9.0, < 3.9.32; >= 3.8.0, < 3.8.34; >= 3.7.0, < 3.7.34

References

Timeline

Published
Jun 12, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-40515.4In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less thaCVE-2020-40526.1In Wiki.js before 2.4.107, there is a stored cross-site scripting through template injection. This vulnerability exists due to an insecure vCVE-2020-40536.8In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archCVE-2020-40547.3In Sanitize (RubyGem sanitize) greater than or equal to 3.0.0 and less than 5.2.1, there is a cross-site scripting vulnerability. When HTML CVE-2020-40597.3In mversion before 2.0.0, there is a command injection vulnerability. This issue may lead to remote code execution if a client of the librarCVE-2020-40605.0In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-biCVE-2020-40615.4In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could CVE-2020-40629.0In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres dataCVE-2020-40667.2In Limdu before 0.95, the trainBatch function has a command injection vulnerability. Clients of the Limdu library are unlikely to be aware oCVE-2020-40677.5In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of informCVE-2020-40689.8In APNSwift 1.0.0, calling APNSwiftSigner.sign(digest:) is likely to result in a heap buffer overflow. This has been fixed in 1.0.1.CVE-2020-40705.4In CSS Validator less than or equal to commit 54d68a1, there is a cross-site scripting vulnerability in handling URIs. A user would have to
CVE-2020-4050: Low severity, CVSS 3.1 | Vulnix