WordPress 2.6.1 Lost Password SQL Column Truncation Unauthorized Access Vulnerability (0.71 - 2.6.1)

Description

WordPress is prone to an unauthorized access vulnerability. Successfully exploiting this issue will allow attackers to reset the password of arbitrary accounts. WordPress 2.6.1 is vulnerable; prior versions may also be affected.

Remediation

Update to WordPress version 2.6.2 or latest

References
Severity
Classification
Tags
  • Missing Update