Unpatched WordPress Password Reset Flaw Disclosed
A researcher has disclosed the details of a WordPress vulnerability that can be exploited by an unauthenticated attacker to reset a targeted user’s password. The flaw was reported to WordPress months ago, but it still has not been patched.
Read more: Unpatched WordPress Password Reset Flaw Disclosed
Story added 4. May 2017, content source with full text you can find at link above.