“WordPress versions 4.4 and earlier are affected by a cross-site scripting vulnerability” Posted on January 7, 2016 by jgordon Link. WordPress is the new Flash.