A critical vulnerability has been discovered in the most popular plugin of the WordPress content management platform (CMS) that puts tens of Millions of websites at risks of being hacked by the attackers. The vulnerability resides in most versions of a WordPress plugin known as’WordPress SEO by Yoast,’ which has more than 14 Million downloads. The flaw resides in the’admin/class-bulk-editor-list-table.php’file, which is authorized to be accessed by WordPress Admin, Editor or Author privileged users only.
Source: https://thehackernews.com/2015/03/wordpress-seo-by-yoast-plugin.html