System	Score	Found at
epss	0.35877	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.36798	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.36798	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.36798	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.36798	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.36798	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.36798	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.36798	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.36798	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.36904	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.36904	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.37104	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
epss	0.37104	https://api.first.org/data/v1/epss?cve=CVE-2020-11027
cvssv2	5.5	https://nvd.nist.gov/vuln/detail/CVE-2020-11027
cvssv3.1	8.1	https://nvd.nist.gov/vuln/detail/CVE-2020-11027

Reference id	Reference type	URL
		http://packetstormsecurity.com/files/173034/WordPress-Theme-Medic-1.0.0-Weak-Password-Recovery-Mechanism.html
		https://api.first.org/data/v1/epss?cve=CVE-2020-11027
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11025
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11026
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11027
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11028
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11029
		https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-ww7v-jg8c-q6jw
		https://lists.debian.org/debian-lts-announce/2020/05/msg00011.html
		https://wordpress.org/support/wordpress-version/version-5-4-1/#security-updates
		https://www.debian.org/security/2020/dsa-4677
959391		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=959391
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:5.4:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:5.4:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVE-2020-11027	Exploit	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/51531.py
CVE-2020-11027		https://nvd.nist.gov/vuln/detail/CVE-2020-11027

Data source	Exploit-DB
Date added	June 19, 2023
Description	WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password
Ransomware campaign use	Unknown
Source publication date	June 19, 2023
Exploit type	webapps
Platform	php
Source update date	June 19, 2023

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2020-11027

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2020-11027

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Percentile	0.96962
EPSS Score	0.35877
Published At	Aug. 1, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-31T10:56:13.710640+00:00	Debian Oval Importer	Import	https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2	37.0.0