SUPEE-6482 has been released and resolves several security related issues: Issues resolved: SSRF Vulnerability in WSDL file – APPSEC-1020 Autoloaded File Inclusion in Magento SOAP API – APPSEC-1019 Cross-site Scripting/Cache Poisoning – APPSEC-1030 Cross-site Scripting in Gift Registry Search – APPSEC-1022 Full patch notes can be found here