Millions of WordPress Sites Got a Forced Update for a Serious Bug
by Dan Goodin, Ars Technica from on (#5WAQD)
The mandatory patch addressed a critical vulnerability in a widely used plugin that allowed untrusted visitors to download a website's backups.