84% of the WordPress site can be hacked: What’s Next?
cleantalk.org
cleantalk.org
The XSS patches from 4.0.1 were back-ported to 3.9.3, 3.8.5, and 3.7.5. People should still upgrade to 4.0.1, but the situation is not as dire as this post makes it out to be.