400,000 WORDPRESS SITES AFFECTED BY ACCOUNT TAKEOVER VULNERABILITY IN POST SMTP WORDPRESS PLUGIN

Summary from the TLDR InfoSec newsletter

Over 400,000 WordPress sites are at risk due to a severe vulnerability in the Post SMTP plugin, which allows hackers to view password reset emails and potentially take over accounts. Exploitation is already underway. Users must urgently update to version 3.6.1 to prevent their site from being compromised.