Tech2know

A vulnerability was discovered in WordPress 2.8.3. WordPress 2.8.4 was released which has this fixed. The vulnerability can allow a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.

For further information and fix click Security release.

The easiest way to stay informed about everything on Tech2know is to go for at lease one of below options :

Subscribe to my RSS feed / Subscribe by E Mail / Follow me on twitter /Become a fan on Facebook.

Stay tuned for more.

Related posts:

1. Microsoft to release 9 security updates of which five are Critical
2. [How to] Download Norton Internet Security and Antivirus 2010 Beta Release
3. Google Chrome Security Fixes
4. Microsoft released 5 security updates
5. Mozilla released security updates for Firefox 3.5.2 and 3.0.13