WordPress had a pretty important security update this week fixing several holes.
WordPress v4.7.1
WordPress 4.7.1 was released on Wednesday, fixing 8 security vulnerabilities including two we covered in December on our blog. Your site should have been automatically updated by now if you have a default WordPress configuration. If your site has not been updated, we recommend that you upgrade at your earliest convenience.
You can find more details about the vulnerabilities here.
Plugins
Wordfence v6.2.10
Weaver X Theme Support v3.1
Wordfence v6.2.10
Weaver X Theme Support v3.1
Themes
Weaver Xtreme v3.1
Weaver Xtreme v3.1