WordPress 4.2 and prior versions contain critical cross-site scripting vulnerabilities.

Connectikpeople.co recalls that WordPress 4.2 and prior versions contain critical cross-site scripting vulnerabilities. Exploitation of these vulnerabilities could allow a remote attacker to take control of an affected website.

Therefore, users and administrators are encouraged to review the WordPress Security and Maintenance Release and upgrade to WordPress 4.2.2.