WordPress version 6.4.2 fixes a vulnerability that could allow attackers to execute arbitrary PHP code.