CVE-2019-17673

WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.

Date published : 2019-10-17

https://seclists.org/bugtraq/2020/Jan/8

https://www.debian.org/security/2020/dsa-4599