CVEs-PoC/2020/CVE-2020-28037.md

### [CVE-2020-28037](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28037)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation).

### POC

#### Reference
- https://wpscan.com/vulnerability/10450

#### Github
No PoCs found on GitHub currently.