hakluke 👨💻🚀 on Twitter: "Isn't it crazy that a project as widely used and mature as Wordpress had 3 XSS, an open redirect, information disclosure and privesc all found in it last
A subtle stored-XSS in WordPress core | Pentest Limited
WordPress 5.4.2 Latest Core Release to Fix All XSS Vulnerabilities