Last week WordPress shipped an emergency security release, 7.0.3, and marked every earlier 7.0 version insecure. The headline fix was a reflected XSS on the login screen that…