WordPress Zero-Day Could Expose Password Reset Emails

Click here to visit Original posting

Polish security expert Dawid Golunski has discovered a zero-day in the WordPress password reset mechanism that would allow an attacker to obtain the password reset link, under certain circumstances. [...]