https://blog.wpsec.com/wordpress-4-9-1-security-maintenance-update/