WordPress 7.0.4 is now available. This security release addresses an authenticated Author+ remote code execution vulnerability involving malicious file uploads on sites that use Imagick and Ghostscript. Update your sites immediately. Fixes are also being backported through the 4.7 branch. wp.me/pZhYe-5yH
