Jesse Ou

The issue is related to "Various security hardening" and has an unknown impact and attack vectors.

The issue allows remote attackers to determine usernames of non-authors via canonical redirects.

The issue allows remote attackers to conduct clickjacking attacks via a crafted web site, as it does not prevent rendering for admin or login pages inside a frame in a third-party HTML document.

The issue allows remote attackers to obtain sensitive data via vectors related to wp-includes/post.php, specifically by treating unattached attachments as published.

The file upload functionality has unknown impact and attack vectors, possibly related to dangerous filenames, when running on hosts with dangerous security settings.

The issue is related to "Taxonomy query hardening" and may involve SQL injection, although the exact impact and attack vectors are not specified.