Two serious security vulnerabilities are addressed in the latest version of WordPress: 4.4.2. Anyone who runs a WordPress site is strongly encouraged to update their site as soon as possible. Sites that are configured for automatic updates should get the new version automatically, but there are sometimes delays in automatic updates, so you should make sure.

The new version fixes seventeen bugs in total. The release notes have all the technical details.