← All advisories

High severity7.5NVD Advisory· Published Jun 29, 2016· Updated Jun 17, 2026

CVE-2016-5839

CVE-2016-5839

Description

WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/WordPress2 versions
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*range: <=4.5.2
- (no CPE)range: <4.5.3
Package: https://wordpress.org/plugins/wordpress

Patches

Vulnerability mechanics

References

5

www.securitytracker.com/id/1036163nvdThird Party Advisory
wordpress.org/news/2016/06/wordpress-4-5-3/nvdVendor Advisory
www.debian.org/security/2016/dsa-3639nvd
www.securityfocus.com/bid/91364nvd
codex.wordpress.org/Version_4.5.3nvd

News mentions

0

No linked articles in our index yet.