The set includes an SQL injection on WP_Query, a blind SQL injection via the ... which should be "define('WP_AUTO_UPDATE_CORE', true );" Automated core updates were introduced in 2013 on WordPress ...

Update (Sept 10): The TSA has issued a statement regarding this ... that anyone with "basic knowledge" of SQL injection could exploit the bug and gain access to the site. Upon realizing the ...