WordPress versions prior to 5.9.2 are affected by multiple security vulnerabilities. An attacker could exploit these vulnerabilities to take control of an affected website. Security vulnerabilities were fixed in WordPress 5.9.2.

More information on vulnerabilities and update is available in WordPress 5.9.2 release note – wordpress.org.