CVE-2018-20148

CVE-2018-20148

In WordPress versions before 5.0.1, contributors could conduct PHP object injection attacks via crafted metadata.

Source: CVE-2018-20148