Mailing the story:
WordPress 4.9.7 Update Fixes a Pair of Security Vulnerabilities
Millions of WordPress sites around the world were at risk from a pair of related file deletion vulnerabilities, that could have potentially enabled an attacker to delete arbitrary files.