Information disclosure was possible via XML entity attacks in the external GetID3 library.
This vulnerability affects the following application versions:
- WordPress 3.6
- WordPress 3.6.1
- WordPress 3.7
- WordPress 3.7.1
- WordPress 3.7.2
- WordPress 3.7.3
- WordPress 3.8
- WordPress 3.8.1
- WordPress 3.8.2
- WordPress 3.8.3
- WordPress 3.9
- WordPress 3.9.1