More info with the latest version can be found at WordPress development blog.
The draft vulnerability is funny thought. Read it all at BlackHat Domainer. Nice catch .