Security Flaw in WordPress Plugin Puts 400,000 Websites at Risk
A critical vulnerability in the Ally WordPress plugin allows unauthenticated attackers to extract sensitive database data including password hashes from hundreds of thousands of affected websites.