In reply to bradleygriffin1.

Zhu reported an issue that is related but different than the ticket referenced for WordPress.org. The issue was specifically with custom functionality in WordPress.com. http://nacin.com/2014/05/30/security-is-nuanced/