“Fix: Optimized controls sanitization to enforce better security policies in Onboarding wizard.”

Plugin authors can, and should, do better than this. When their sites at are risk, there is a responsibility to communicate clearly with owners of sites who have installed our plugins.

“Security fix: Versions 3.6.0 up to 3.6.3 contain a critical security vulnerability allowing any logged-in user (of any level) to take over complete control of the site. All sites with non-trusted users should update immediately.”