WordPress.org has a new security update. This is a very important release because it fixes most of the XSS (Cross Site Scripting) vulnerabilities.
- Widget block
- Feature Image block
- RSS Block
- Search Block
- Stored XSS via
wp-mail.php
- customizer
Another is the sanitation of the class WP_Date_Query. Be sure to update to the latest release. Download the latest version or update via WordPress dashboard.