Comments considered harmful: WordPress web hijack bug revealed

Patch NOW after researcher drops zero-day on popular blog software

A frustrated Finnish security researcher has gone public with a vulnerability in WordPress that lets attackers hijack website admin accounts."