wordpress -- multiple vulnerabilities

Wordpress reports:

External code has been updated to non-vulnerable versions. In addition the following bugs have been fixed:

• Limited privilege escalation where a site administrator could deactivate network-wide plugins when running a WordPress network under particular circumstances.
• Cross-site scripting vulnerability when making URLs clickable.
• Cross-site scripting vulnerabilities in redirects after posting comments in older browsers, and when filtering URLs.

[source]