The UserPro plugin for WordPress has a critical security vulnerability that allows unauthorized users to change passwords of certain users by exploiting a secret key.
View full story…