WordPress security release 4.4.2 is now available. This is a WordPress security release for all previous versions. WordPress strongly encourages you to update your sites immediately.
WordPress Security Release 4.4.2 Fixes Two Known Issues
WordPress versions 4.4.1 and earlier are affected by two security issues:
- A possible SSRF for certain local URIs, reported by Ronni Skansing
- An open redirection attack, reported by Shailesh Suthar