via ithemes.com => original post link
Since last week, 97 new vulnerabilities have emerged in public disclosures. They may affect over two million WordPress sites. This includes 50 plugin vulnerabilities with security patches, so run those updates!
Additionally, there are 47 plugin vulnerabilities with no patch available yet. If you use an unpatched plugin or theme, check their vendors’ intentions and progress toward a security release. If no patch is forthcoming or the vulnerable software has been marked “closed” and dropped from the official WordPress theme or plugin repositories, you should consider deactivation and removal in favor of alternative solutions.
WordPress Core Vulnerabilities — Patched