Description
WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified vectors.
Remediation
References
Related Vulnerabilities
OpenSSL Numeric Errors Vulnerability (CVE-2016-2181)
WordPress Plugin WP-Board SQL Injection (1.1)
WordPress Plugin Simple Post Cross-Site Scripting (1.1)
Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-7465)
WordPress Plugin Bing Site Verification using Meta Tag Cross-Site Scripting (1.0)