WORDPRESS SECURITY PLUGIN EXPOSES PRIVATE DATA TO SITE SUBSCRIBERS

Summary from the TLDR InfoSec newsletter

Security researchers have found a vulnerability in the WordPress plugin that allows authenticated users to access any server file due to missing capability checks, affecting over 100,000 servers.