WordPress 2.6.2 has been released by WordPress development team. It’s a mandatory update if you’re allowing user registration in your WordPress blog.
One can register as a user and he/she can later reset the password of others. Its bit annoying, isn’t it?
If you’re opened for registration, it’s a must don’t miss it update it now itself.