Description
In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public.
Remediation
References
Related Vulnerabilities
WordPress Plugin Affiliates Manager Unspecified Vulnerability (2.7.7)
WordPress Plugin Product Catalog Multiple SQL Injection Vulnerabilities (2.1)
WordPress Plugin SB Uploader Arbitrary File Upload (3.2)
PHP Use of Uninitialized Resource Vulnerability (CVE-2015-8390)
WordPress Plugin Advanced Page Manager Cross-Site Scripting (1.4.1)