Previous versions contain a possible Cross-Site Scripting (XSS) exploit on the network settings page that can be exploited by hackers.
This vulnerability affects the following application versions:
- WordPress 4.2
- WordPress 4.2.1
- WordPress 4.2.2
- WordPress 4.2.3
- WordPress 4.2.4
- WordPress 4.2.5
- WordPress 4.2.6
- WordPress 4.2.7
- WordPress 4.3
- WordPress 4.3.1
- WordPress 4.3.2
- WordPress 4.3.3
- WordPress 4.4
- WordPress 4.4.1
- WordPress 4.4.2