The WordPress core team released version 5.4.2 on Wednesday, June 10. This release contains patches for a number of cross-site scripting (XSS) vulnerabilities, amongst other fixes.
Moments ago, our Threat Intelligence team posted an analysis of the vulnerabilities fixed in this release of WordPress core.
