Description
WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed.
Remediation
References
Related Vulnerabilities
Joomla Improper Input Validation Vulnerability (CVE-2020-35616)
Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9749)
e107 Other Vulnerability (CVE-2004-2262)
Moodle Improper Check for Dropped Privileges Vulnerability (CVE-2019-14879)
Angular Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)