Another day, another security problem with wordpress, and one that brings out a serious problem on the install and patch level:

WORDPRESS DOESN"T DELETE OLD CODE, it just overwrites.

What it means is that this "update" by itself doesn't actually fix the problem unless you first delete the offending files. The example file occurs in a number of themes, and without manually removing the file, the security issue will not be easily fixed.

My recommendation for wordpress is to stop working on 4.3, and start working on a version 5.0 - with the requirement of a full and complete deletion of code before the install. It's time to clean up all of the old legacy code and stuff that ends up cluttering older installs.

Oh, and getting to the third major update in a week is having a pretty serious impact on my productivity. The only part of wordpress scaling right now is workload to maintain the product.