The Halloween fright, CVE-2017-14723, was discovered and reported to the bug bounty program in September by researcher Anthony Ferrara. While WordPress core is not affected, according to the new release announcement, the new version hardens it to protect it from attacks via plugins and themes.

Read full news article on WHIR