Jing Qian

The `tarfile` module's data and extraction filters are susceptible to a bypass when processing crafted archives containing a hard link that targets a symbolic link. This issue occurs during the execution of the `extractall()` function, potentially allowing an attacker to modify the permissions or modification time of files located outside the intended destination directory. Additionally, it may lead to the exposure of the contents of such files within the extracted directory tree. Non-link entries are not affected.

An issue exists where a capability check is missing on the `bitapps fm connector` endpoint. This allows any authenticated user, including those with subscriber-level privileges, to browse the entire WordPress installation directory and download specific file types, such as archives and documents, which may contain sensitive data.