WordPress 4.4.2 - New Security & Maintenance Release

WordPress 4.4.2 has already been released and available to download. This is a new security version for all previous releases, so that it’s strongly recommended to update your site immediately.

This new release addresses and fixes two security issues that exposed the site’s visitor to new attack vectors. These issues include a possible SSRF (Server Side Request Forgery) for certain local URLs and an open redirection attack.

Additionally, WordPress 4.4.2 also fixes 17 bugs which relate to pagnition and a handful of comment-related issues from all previous versions. You can learn more about these changes here or release notes.

Sites configured to receive automatic update should update within 24 hours. Since this is a security version, it is highly recommended to update your site as soon as possible.