WordPress 4.4.2 was just released. This release includes important security fixes and we encourage you to update your websites as soon as possible.
As always, Managed WordPress websites will be updated by 1&1 automatically. If you have installed WordPress yourself or use a standard installation from the 1&1 App Center, you can update to 4.4.2 from your WordPress Dashboard. Select Updates and click Update Now. If you prefer to update manually, you can download WordPress 4.4.2 here.
Security updates and bugfixes in WordPress 4.4.2
From the WordPress blog: WordPress versions 4.4.1 and earlier are affected by two security issues: a possible SSRF for certain local URIs, reported by Ronni Skansing; and an open redirection attack, reported by Shailesh Suthar.