CVE-2020-28035: WordPress before 5.5.2 allows attackers … Posted on November 1, 2020 by Autobot WordPress before 5.5.2 allows attackers to gain privileges via XML-RPC. View Original Source Source