WordPress 4.2.1 Security Release ![rw-book-cover](https://s.w.org/images/backgrounds/wordpress-bg-medblue.png) ## Metadata - Author: [[Gary Pendergast]] - Full Title: WordPress 4.2.1 Security Release - Category: #articles - Summary: WordPress 4.2.1 is now available. This is a critical security release for all previous versions and we strongly encourage you to update your sites immediately. - URL: https://wordpress.org/news/2015/04/wordpress-4-2-1/ WordPress 4.2.1 is now available. This is a **critical security release** for all previous versions and we strongly encourage you to update your sites immediately. A few hours ago, the WordPress team was made aware of a cross-site scripting vulnerability, which could enable commenters to compromise a site. The vulnerability was discovered by [Jouko Pynnönen](http://klikki.fi/). WordPress 4.2.1 has begun to roll out as an automatic background update, for sites that [support](https://wordpress.org/plugins/background-update-tester/) those. For more information, see the [release notes](https://codex.wordpress.org/Version_4.2.1) or consult the [list of changes](https://core.trac.wordpress.org/log/branches/4.2?rev=32311&stop_rev=32300). [Download WordPress 4.2.1](https://wordpress.org/download/) or venture over to **Dashboard → Updates** and simply click “Update Now”., WordPress 4.2.1 Security Release, Gary Pendergast, 01gnmcz4dgpyjemjn1gdfvg7v1.