Around 500,000 WordPress websites could be at risk from crucial plugin security flaw — here's what we know

Hackers can read arbitrary files, including those containing passwords, with this newly discovered WordPress flaw.