2
Wordfence is Claiming It Is a Critical Vulnerability for WordPress Administrators to Upload Arbitrary Files
(www.pluginvulnerabilities.com)
Discussion about WordPress security without all the falsehoods.