Just letting you know that we've put in a work-around to this security vulnerability into the WordPress Security Firewall ( https://wordpress.org/plugins/wp-simple-firewall/ ) - this plugin has an auto-update feature so if you're using it, you'll be safe enough after the upgrade :)

Cheers!
Paul.