Everything TechWire Beat has reported about WordPress: 4 stories, newest first. Part of our Vulnerabilities coverage.
A critical vulnerability in the DirectoryPress plugin allows unauthenticated attackers to include local files, threatening full system compromise for sites running versions up to 3.6.27.
A severe vulnerability in the Dynamic User Directory WordPress plugin allows attackers to execute arbitrary code on affected installations.
A severe vulnerability in the Yacht Rental WordPress theme allows unauthenticated attackers to inject malicious code into sites running version 2.6 or earlier.
A severe vulnerability in the Booklovers WordPress theme allows unauthenticated object injection, affecting all versions up to 2.13.0.