Wordpress Security Flaw: Reset Admin Password of Any Blog Without Confirmation (programmerfish.com)

3 points by mindplunge 16y ago ↗ HN

2 comments

[ 3.7 ms ] story [ 17.6 ms ] thread

Hey, I found a security hole! Seems like the logical thing to do is go use it on a bunch of random websites.

And he documented his "success" for the whole world to see. I wonder what the legal implications are.