https://wptavern.com/wordpress-4-2-3-is-a-critical-security-release-fixes-an-xss-vulnerability