WordPress updated to 2.6.2 (#)
WordPress has been updated to version 2.6.2 following a warning from Stefan Esser about a possible security vulnerability. For blogs with open user registration, a hacker could craft a username to allow resetting another user’s password to a random password. The new password is not disclosed to the hacker, but other another vulnerability helps disclose the password.
As usual, WordPress team recommends upgrading. A handful of other fixes are also included in this upgrade (see changed files).