The WordPress Vulnerability report is as follows.

WordPress Plugin : 

1. Contact Form 7 Vulnerability in +5 Million Sites

• A serious vulnerability was patched in Contact Form 7 that allows attackers to upload malicious scripts.
• A vulnerability has been discovered in Contact Form 7 that allows an attacker to upload malicious scripts. The publishers of Contact Form 7 have released an update to fix the vulnerability.

It is crucial to the security of your WordPress site that you have an update routine.
You should be logging into your sites at least once a week to perform updates.