WordPress updates required: https://wordpress.org/ne...

> The attack has no preconditions and can be exploited by an anonymous user in a stock install of WordPress with no plugins — https://slcyber.io/resea...