WordPress 4.2.1 is now available for download. This is a critical security release for all previous versions. What’s new in this final release?
Fixes:
cross-site scripting vulnerability, which could enable commenters to compromise a site.
Download WordPress