Four million WordPress installations at risk due to vulnerability in Really Simple Security plugin
At least 4,000,000 pages made with WordPress using the free or paid version of Really Simple Security(formerly Really Simple SSL) were affected by a critical authentication bypass vulnerability. All the details are in this article by István Márton on the Wordfence blog. The vulnerability, already fully fixed in version 9.1.2 of the plugin,