WordPress

WordPress patches critical flaw letting anyone hijack sites

WordPress released emergency security updates on Friday, closing a critical pre-authentication remote code execution vulnerability that allows an anonymous attacker to take full control of any default WordPress installation with a single HTTP request.