CVE-2017-14722

Before version 4.8.2, WordPress allowed a Directory Traversal attack in the Customizer component via a crafted theme filename.

Date published : 2017-09-23

http://www.securityfocus.com/bid/100912

https://www.debian.org/security/2017/dsa-3997