"Serious Flaw Found and Patched in Wordpress, but It Might Lurk in Plugins"

Security company, RIPS Technologies, has revealed the possibility of WordPress websites being remotely hijacked through the exploitation of a flaw in third-party plugins. The bug has been categorized as a path traversal vulnerability. This article continues to discuss the vulnerability, how it could be exploited by attackers, the malicious activities that could be performed through the exploitation of this bug, and other recent discoveries surrounding the vulnerability of WordPress plugins.   

CyberScoop reports "Serious Flaw Found and Patched in Wordpress, but It Might Lurk in Plugins"