Two vulnerabilities have been identified in WordPress, which could be exploited by malicious users to gain knowledge of sensitive information or compromise a vulnerable system.
The first issue is caused by an input validation error in the file upload functionality when processing a file with a filename containing multiple file extensions, which could allow malicious users to upload PHP scripts and execute arbitrary commands on a web server with a specific configuration.
The second vulnerability is caused by an unspecified input validation error when processing user-supplied data, which could be exploited by malicious users to conduct cross site scripting attacks.
