2.8.6 repairs 2 protection troubles that can be made use of by signed up, visited individuals that have publishing opportunities. If you have untrusted writers on your blog site, updating to 2.8.6 is advised.
The very first issue is an XSS susceptability in Press This found by Benjamin Flesch. The 2nd issue, found by Dawid Golunski, is a concern with disinfecting uploaded data names that can be made use of in particular Apache arrangements. Many thanks to Benjamin and also Dawid for searching for and also reporting these.