Description
is_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is considered protected.
Remediation
References
Related Vulnerabilities
Joomla! Core 1.6.x Information Disclosure (1.6.0 - 1.6.6)
WordPress Plugin WHMCS Bridge Cross-Site Scripting (6.2)
WordPress Plugin WP Mobile Menu-The Mobile-Friendly Responsive Menu Cross-Site Scripting (2.8.2.2)
WordPress Plugin XML Sitemap & Google News feeds Cross-Site Scripting (4.5)
WordPress Plugin Podlove Podcast Publisher SQL Injection (2.5.3)