CVE-2020-28037

is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation).

List of 1,220,159 websites affected by CVE-2020-28037

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
************.org	Singapore	***
****.br	Brazil	***
*********.net	United States	***
*********.com	Italy	,**
*****.com	United States	,**
***********.com	United States	,**
****.ch	United States	,**
************.org	United States	,**
***.**.br	Brazil	,**
****.org	United States	,**
*****************.com	United States	,**
******.**.br	Brazil	,**
************.com	United States	,**
*******.io	Russia	,**
********.eu	Austria	,**
************.com	United States	,**
***************.com	Croatia	,**
********************.ru	Russia	,**
*********.com	United States	,**
****.****.one	Turkey	,**