News for hackers. Stuff that matters.
Re:Remind HN: Update your wordpress sites by spocked on Thursday May 14, 2015 @05:02AM (#9544066)
https://wordpress.org/news/2015/05/wordpress-4-2-2/

This is a critical security release. The cross-site scripting vulnerability lets a commenter compromise your website.

Re:Remind HN: Update your wordpress sites by ghubbard on Thursday May 14, 2015 @08:28AM (#9544687)
The exploit is described and demonstrated in a video on the site of the discoverer: http://klikki.fi/adv/wordpress2.html