Description WordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredIterator.php. Remediation References CVE-2020-28032 Related Vulnerabilities OpenSSL NULL Pointer Dereference Vulnerability (CVE-2016-7053) Zenphoto Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-5593) PHP Numeric Errors Vulnerability (CVE-2011-1466) WordPress Plugin WP Insightly for Contact Form 7 and Ninja Forms Cross-Site Scripting (1.0.7) WordPress Plugin Tune Library 'letter' Parameter SQL Injection (1.5.1) Severity Critical Classification CVE-2020-28032 CWE-502 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities