WordPress fixed three security issues, including a XSS and SQL injection, with WordPress 4.7.2 this week.
Source: Threadpost