Launchpad.net

CVE 2016-5839

WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified vectors.

See the CVE page on Mitre.org for more details.

References