WordPress has taken the unusual step of forcing an update over a serious unauthenticated SQL injection vulnerability discovered in the Loginizer plugin. The updated version is 1.6.4.

If you have not yet received the update you're urged to update manually.

[wpscan.com...]