Welcome back to the Patchstack Weekly Security Update! This update is for week 24 of 2022.

This week I will cover two high risk unauthenticated vulnerabilities, one could allow attackers to reset an any user's password (including admin users) and the other could arbitrarily delete files from websites running insecure versions of the plugin.

Thankfully both have been patched, so now it's up to site owners to apply that patch as soon as they can.

In this week's knowledge share, i will talk about a WordPress specific security bug. This security bug only applies to WordPress websites, because it has to do with the risks involved if users are able to update, or change values in the wp_options table.

If you're curious what could go wrong if attackers can update the options table values, stick around for this week's knowledge share.