Redirect bypass in the customizer.
https://wordpress.org/news/2016/06/wordpress-4-5-3/
This vulnerability affects the following application versions:
- WordPress 4.4
- WordPress 4.4.1
- WordPress 4.4.2
- WordPress 4.4.3
- WordPress 4.5
- WordPress 4.5.1
- WordPress 4.5.2