WordPress quickly turned around a patch for a stored cross-site scripting zero-day vulnerability in the CMS’ core engine.