WordPress 4.2.1 Security Release

Published April 29, 2015 | By Widomaker

Customers using WordPress on their hosted web sites should immediately update due to a critical security issue. See…

https://wordpress.org/news/2015/04/wordpress-4-2-1/

WordPress 4.2.1 is now available. This is a critical security release for all previous versions and we strongly encourage you to update your sites immediately.

A few hours ago, the WordPress team was made aware of a cross-site scripting vulnerability, which could enable commenters to compromise a site. The vulnerability was discovered by Jouko Pynnönen.

WordPress 4.2.1 has begun to roll out as an automatic background update, for sites that support those.

For more information, see the release notes or consult the list of changes.

Download WordPress 4.2.1 or venture over to Dashboard → Updates and simply click “Update Now”.